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U.S.  Department  of  Justice 

United  States  Attorney 
Southern  District  of  New  York 


The  Silvio  J.  Mollo  Building 
One  Saint  Andrew ’s  Plaza 
New  York,  New  York  10007 


July  18,  2019 


BY  ECF 

The  Honorable  William  H.  Pauley  III 
United  States  District  Judge 
Southern  District  of  New  York 
500  Pearl  Street 
New  York,  NY  10007 

Re:  United  States  v.  Michael  Cohen,  18  Cr.  602  (WHP) 

Dear  Judge  Pauley: 

Pursuant  to  the  Court’s  February  7,  March  18,  and  July  17,  2019  orders,  the  Government 
attaches  redacted  copies  of  the  search  warrant  materials  that  were  the  subject  of  these  orders,  as 
well  as  a  redacted  copy  of  the  Government’s  July  15,  2019  status  letter.  An  index  of  the  attached 
documents  is  provided  below: 

Exhibit  1-18  Mag.  2969.  April  8,  2018  application,  affidavit,  and  search  warrants  for 
four  premises  and  two  cellular  phones  associated  with  Michael  Cohen. 

Exhibit  2-18  Mag.  2698.  April  9,  2018  application,  affidavit,  and  search  warrant  for  a 
hotel  room  associated  with  Michael  Cohen. 

Exhibit  3-18  Mag.  1696.  Eebruary  28,  2018  affidavit  and  search  warrants  for  email 
accounts  used  by  Michael  Cohen  and  three  other  individuals. 

Exhibit  4-  18  Mag.  1697.  Eebruary  28,  2018  application,  affidavit,  and  search  warrant  for 
a  device  containing  the  results  of  three  prior  search  warrants  of  email  accounts  used  by 
Michael  Cohen. 

Exhibit  5-18  Mag.  2877.  April  5,  2018  affidavit  and  search  warrant  for  out  of  jurisdiction 
attachments  from  email  search  warrant  included  in  Exhibit  3. 

Exhibit  6-18  Mag.  2958.  April  7,  2018  application,  affidavit  and  search  warrant  for  three 
devices  containing  the  results  of  prior  search  warrants  of  email  and  iCloud  accounts  used 
by  Michael  Cohen. 


Exhibit  7-18  Mag.  2957.  April  7,  2018  application,  affidavit  and  search  warrant  for 
cellphone  location  information  for  two  cellular  phones  used  by  Michael  Cohen. 
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Exhibit  8-18  Mag.  2974.  April  8,  2018  affidavit  and  search  warrant  for  cellphone  location 
information  for  two  cellular  phones  used  by  Michael  Cohen. 

Exhibit  9  -  Government’s  July  15,  2019  status  letter. 


Respectfully  submitted, 

AUDREY  STRAUSS 
Attorney  for  the  United  States, 

Acting  Under  Authority  Conferred  by 
28  U.S.C.  §  515 


Thomas  McSSy-?1^colas  Roos 
Assistant  United  States  Attorneys 
(212)  637-2200 


cc:  Counsel  of  Record  (by  ECE) 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant  _ _ _ _____ 

United  States  District  Court 

for  the 

Southern  District  of  New  Y ork 

In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Four  Premises  and  Two  Electronic  Devices,  See 
Attached  Affidavit  and  Riders 

APPLICATION  FOR  A  SEARCH  WARRANT 

I  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 

^^^teliS^lfiSfBevice“s;s^“AttachedAffid"m^^^ 

located  in  the  Southern  District  of _ New  York _ ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  be  seized): 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDERS. 

The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (check  one  or  more): 

^  evidence  of  a  crime; 

af  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

1^ property  designed  for  use,  intended  for  use,  or  used  in  committing  a  dime, 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  resfrained. 

The  search  is  related  to  a  violation  of: 

Code  Section  Ojfense  Description 

18  U.S.C.  s  371,  1005,  1014,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial  institution, 

1343  and  1344,  and  wire  fraud,  bank  fraud,  and 

52  DSC  30116  and  30109  illegal  campaign  contributions 

The  application  is  based  on  these  facts; 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

1^  Continued  on  the  attached  sheet. 

□  Delayed  notice  of _ days  (give  exact  ending  date  if  more  than  30  days:  _ - )  is  requested 

under  18  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


Sworn  to  before  me  and  signed  in  my  presence. 

Date:  04/08/2018 

City  and  state:  a/  P-  (v  /U  u.-'  v??  /I  f 


Printed  name  armitle 


. .  lyy.  Judge ’s  signature 

Hon.  Hanry  B'  Pitman,  U.S.  Magistrate  Judge 


Printed  name  arid  title 


I  i8MAG  2969 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Applieation  of  the  United  ; 
States  of  America  for  a  Search  and  Seizure  : 
Wan-ant  for  the  Premises  Known  and  Described  : 


as  (I)  502  Park  Avenue, 


I'^ew 


York,  New  York  10022,  (2)  Michael  Cohen’s  ; 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  ; 
York,  New  York  10112,  (3)  Safe  Deposit  Box  #  ; 
^Bkocated  at  the  TD  Bank  Branch  at  500  Park  ; 
iwenue,  New  York,  New  York  10019,  and  (4)  ; 

Eoews  Regency  Hotel7540“Park  AvenuerRoom-r 

1728,  New  York,  New  York  10065,  and  Any  i 
Closed  Containers/Items  Contained  Therein,  and  : 
the  Electronic  Devices  Known  and  Described  as  : 
(1)  an  Apple  iPhone  with  Phone  Number  im: 
■■■■and  (2)  an  Apple  iPhone  with  Phone  : 
Number 

Reference  No.  2018R00127 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


Special  Agent,  Federal  Bureau 


of  Investigation,  being  duly  sworn. 


deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 


involving  electronic  evidence. 

2.  I  malce  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 


Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F .  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
infoi-mation  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 

- gg^ablighing  probable  cause,  it  doesTiot  include  all  the  facts" thaPThave  learned  during  the  eourse 


of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 


conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  paid,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3 .  Subject  Premises-1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  ai'e  particularly  described  as; 

a.  Subject  Premises-1  is  Apartment|^|located  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Park  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^^^^floor  of  the  building. 


Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 


Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below,  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10112.  The  building  located  at  30  Rockefeller  Plaza 


1  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subjeet  Premises-2  is  loeated  on  the  23rd  floor  of  the  building  inside  of  the  offiees  of  the 
law  firm  Squire  Patton  Boggs.  The  offiee  is  assigned  to  Miehael  Cohen.  As  deseribed  below, 
Miehael  Cohen  works  and  conducts  meetings  at  Subjeet  Premises-2. 

e.  Subjeet  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Banlc 
braneh  loeation  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  reeords 

mramtained  by  TD-Bank,-Thave-leamed  that  the^safety  deposit  box  is  approximately-five  inehe^by- 

ten  inehes  in  size,  and  is  marked  as  box  I^H  The  safety  deposit  box  is  in  the  name  of  Miehael 
Cohen  and  Laura  Cohen. 

d.  Subjeet  Premises~4  is  Room  1728  loeated  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  loeated  on  Pai'k 
Avenue  and  61st  Street.  Subjeet  Premises-4  is  loeated  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  seareh  warrants  deseribed  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  reeeived  an  email  fi-om  an  employee  of  Loews  Regeney,  whieh 
ineluded  a  priee  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  fi-om  January  8  to 
April  8, 20 1 8  On  or  about  January  29,2018,  Cohen  sent  an  email  to  a  Loews  Regeney  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thui-sday. 
Please  mark  down  that  we  will  be  talcing  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  eell  phone  loeation  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  loeated  in  the  vicinity  of  Subject  Premises-4.  In  pai-tieular,  on  or  about 


^  Although  the  quoted  priee  eontemplated  a  three-month  stay  fiom  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  eellphone  loeation 
infonnation  demonstrates  that  Cohen’s  eellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present. 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 


Premises"4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  Subject  Devices  )  aie 


particularly  described  as; 

- ^—Subject  Device-Hs  an-Apple  iPhone  servicedhy-A“T&T  with  the  telephone  number 

Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 


maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  in  the  Southern 
District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 


Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 


District  of  New  York. 

c.  Based  on  my  haining,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


^  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  sm-veillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  instrumentalities  of 
violations  of  T-8”-^UTS^e^§§  1005' (false-banle  entries),  1014  (false-statements  to-a-fmanGial- 
institution),  1343  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Banlc  Fraud  Offenses  ), 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  confributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  seiwed  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  fi-om  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  ^^^^^^^|@gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1,  2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 

l^gmail.com  (the 


for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  | 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

- — - c.- - On-or-abouGNovember  13,"20177  th^FBI  sought-and-obtained-a-seareh 


warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
November  13,  2017  (the  “Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  for  emails  in  the  account 


I  (the  “Cohen  MDCPC  Accormf ’)  sent  or 


received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13, 2017  (the  First 


Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  ceifain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Wan-ant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 


Based  on  my  review  of  this  waixant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  fi'om  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 

for  privilege. 

9.  On  or  about  February  28, 2018,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 2017  and  February  28, 2018  (the  “Thud  Cohen  Gmail  Warrant 

and  the  “SecbnWCohetrMDCPe-WaiTanf’)r-The  content  produced'pursuant  to  these  warrantsds- 

subject  to  an  ongoing  review  for  privilege  by  an  SONY  filter  team.® 

10.  The  emails  search  wan'ants  described  above  ai'e  refen'ed  to  collectively  as  the 

“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  20 1 8,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8,  2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  knoAvn  as  a  “triggerfish,”  to  determine  the  location  of  Subject 
Device- 1  and  Subject  Device-2. 

TT.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

®  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,  2018. 

®  On  or  about  February  28,  2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  waiTants  authorizing  the  search  of  emails  and  content  obtained  pm'suant  to  previously 
issued  warrants  for  additional  subject  offenses. 

8 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  9  of  269 


campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

1 3 .  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 

in  and  omitted  material  infoiTnation  from  financial  statements  and  other  disclosures  that  Cohen 

-provrded-to”multiple  Tanics-iu-coimection  with-a-transaetion- intended-to-relieve-Gohen  of — 

approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollar's 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banlcs  fi'om  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  pa3mient  to  a  third  pai'ty,^^^^| 
connection  with  ^^^^^^^^^^^rcquisition  of  the  taxi  medallions  securing  Cohen  s 
debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  malcing 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  Ifom  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  somces,  I  have  learned  that  Cohen  has  used  the  Subject 

Premises  to-(a)-receive  documents  related-to  the-transaction-intended  to  relieve  Cohen  oThis-taxi- 

medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  fransaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below,  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  weU  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  lilcely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Chfford,  as  well  as  electronic  devices  contaming  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  lilcely  contains  elecfronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banlcs,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

- - ^ - The-Bank-Fraud-Scheine - - - ^ - 

(i)  Cohen ’s  Statements  to  Sterling  National  Bank 
16.  As  set  forth  in  detail  below,  in  20 14,  Cohen,  through  LLCs  controlled  by  him  and 
his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling”)  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guai'antees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  fi'om  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Mehose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  mauitained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  indushy  and  the  value  of  taxi  medallions,  as  well  as  my  paificipation 
in  iuterviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-l”)  and  two  other 


’  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  ovm  32  taxi  medallions  (each  EEC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 

loans  fiom  Capital  One  banlc,  for  which  the-medallions'served-as-collateral—Cohen-was-not-a  taxi- 

operator,  and  leased  his  medallions  to  a  third  party.  That  third  parly  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 
One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  boiTow  more  money  fi-om  the  then-increase  in  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry— as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber— taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans— like  die  loans  held  by 
Cohen — ^were  fi-equently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


^  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondi-a  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approaeh  in 
2014,  when  he  agreed  to  refinanee  his  medallion  loans  for  approximately  $22  million,  whieh — 
aeeording  to  letters  from  Capital  One  in  Sterling’s  files — ^was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  whieh  $14.6  million  was  a  line  of  eredit  to  Cohen).  This  allowed 
Cohen  to  eash  out  the  proeeeds  from  the  transaction. 

e.  Based  on  my  review  of  reeords  maintained  by  Sterling,  I  have  learned  that  on  or 

“aboufDeeember  8720T4,-eaeh-of  Cohen’s  sixteen  taxi-medallion  ttCs  entered  intodoan-agreements 

and  promissory  notes  with  Sterling  for  the  prineipal  sum  of  $1,375,000,  with  repayment  due  on 
Deeember  8, 2016.  Eaeh  loan  was  signed  by  Miehael  or  Laum  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  eaeh  of  the  LLCs  was  the  address  for  Subjeet 
Premises- 1 .  The  loans  were  also  eaeh  seeured  by  a  seeurity  agreement,  dated  the  same  day,  maldng 
the  medallions  eollateral  for  the  notes.  To  give  Sterling  additional  seeurity,  Miehael  and  Laura 
Cohen  signed  personal  guarantees  and  eonfessions  of  judgment,  giving  Sterling  the  right  to  pursue 
eolleetion  against  the  Cohens’  personal  assets  were  their  eorporations  to  default  under  the  loan 
agreements.  The  personal  guai'anty  agreements  stated  tKat  the  LLCs  had  offiees  at  the  address  for 
Subjeet  Premises-1,  and  eontained  a  notiee  provision  that  stated  that  any  notiees  required  by  the 
agreements  should  be  mailed  to  Subjeet  Premises-1 .  In  total.  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  eompanies. 

d.  Pursuant  to  paifieipation  agreements.  Sterling  transferred  45  pereent  of  Cohen’s 
taxi  medallion  debt  to  Mehose.^ 


^  Melrose,  whieh  had  a  business  prineipally  foeused  on  taxi  medallion  loans,  is  now  in 
eonservatorship  by  the  National  Credit  Union  Adminisfration  (“NCUA  ). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Mehose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.^°  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  loiow  that  Sterling  viewed  the 

TFan^iohfai^Blyhecause,accounttngforioan-payments,'cash-flows-fr 

projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f  Based  on  my  review  of  records  maintained  by  Sterling  and  public  som-ces,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  loiow  from  records  maintained  by  Sterling  and  an  interview  with  Sterling 
Employee"2  that,  beginning  in  or  ai'ound  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  from  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occun-ed  on  September  8, 

^°  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1,  2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015— during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substanee,  about  his  eash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email.  Sterling 
Employee-2  eommented  that  despite  Cohen’s  statements,  his  personal  finaneial  information 
“indioate[d]  a  strong  ability  to  make  up  the  differenee  in  payments.”  Cohen,  however,  aeeording 
to  Sterling  Einployee-2,  pushed  the  bank  for  a  reduetion  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  reeords  maintained  by  Sterling  and  my  partieipation  in  an 

lntefview“'witirStMmg  Empl6yee=2rEhave-learned-that-Cohen-and-Sterhng-Employee-2  spoke  ^ 

again  on  September  28,  2015,  and  that  during  the  eall  Cohen  stated,  in  sum  and  substanee,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  redueed  monthly  payments  to  Cohen.  I 
Icnow  from  my  review  of  reeords  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility— both  internally  and  with  Cohen— of  Cohen 
posting  his  real  estate  holdings,  personal  residenee,  or  some  other  eollateral  as  additional  seeurity 
for  the  banks.^^  Aeeording  to  these  reeords,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  doeuments  and  reeords  maintained  by  Sterling,  I  loiow  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  suffieient  returns  on  his 
medallions  to  eover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  redueing  the  interest  rate  Cohen  paid  to  Melrose  and  extending 


the  loan  maturity  date  to  Deeember  8,  2017. 

h.  I  know  from  intei-views  with  Sterling  Employee-1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  Oetober  2016,  Cohen  told  Sterling  Employee-1  that 


Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  | 


■  who  would  agree  to 


Based  on  my  review  of  property  reeords,  I  loiow  that  on  or  about  Oetober  28,  2015,  ai'ound 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subjeet  Premises- 1 — as  collateral,  Cohen  fransferred  Subject  Premises- 1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Mehose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2  referenced 
above,  I  Icnow  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 


corporate  taxi  medallion  entities 
for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 


maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition'of  thedxansfer  of  the^medalliomloans — ^and  beeause-Sterling-wasmnfamiliar-witliJ^HI 
Sterling  requested  that  Cohen  malce  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1, 2017,  Cohen  told  Sterhng  Employee- 1,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 

about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 2017,  Sterling  Employee- 1  told 
that  Mehose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 


teim  sheet  shortly. 

j.  In  order  for  the  banlcs  to  conduct  diligence  and  evaluate  the  proposed  fransaction 
fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee-1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8,  2017,  Cohen  emailed  Sterling  Employee-1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statemenf’)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  fi-om  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 

theinformation  in  file  statemenf  came  from  Cohenandthat-Getzei  had  nofeonfirmed-itsaGGuraey 

or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence.^^ 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and 
attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  from  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  The  term  sheet  included  a  cover  letter  addressed 

to  Cohen  at  Subject  Premises- 1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  oi 
about  September  5,  2017,  Sterling  Employee-1  sent  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet, ^^^^^^^would  borrow  $20,000,000 
from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  ^^^^^vas  to  acquire  fi'om 

Cohen. 

- jt^"7![s^tAf  theTgreemmt7aucordingio  the  teiTn  sheet7^$lT26Si9 13  in  principal  (whieh- 

is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  widi  Cohen  paying  fifty  percent  and  the  banlcs  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willmg  to  divide  the  repayment  of  the  outstanding  principal  balance  despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  paif  of  the  agreement.  Sterling 
and  Melrose  also  agi'eed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ’^H||Htransaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  undeiwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  finaneial  statements  and  tax  returns  for  Cohen  and 
for  its  eredit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1.  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 
‘3072017“(the“September-20T7"FinancialStatement”)r - - 

0.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^"  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 


13  Based  on  my  review  of  Cohen’s  financial  statements,  I  laiow  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

14  Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thiify-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whic^^^ransiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^H^^Ht^i^  sheet. 

19 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  20  of  269 


time,  he  indicated  was  held  by  atrust).^^  The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  tune  Cohen  provided  Sterling 
with  these  financial  statements— i.e.,  in  or  ai'ound  September  2017 — Cohen  stopped  paying 

monthly  loan  payments  on  his  taxrmedallion  loans  altogetheiv-Aeeording- to  Sterling-Employee 

2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Mehose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-^^^^|  transaction  was  favorable  for  the  bank 
-  that  is,  that^^^^^fvould  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterfing  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addi-essed  to  Cohen  at  Subject  Premises-1 .  Cohen  did  not  make  an  hmnediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen'^^^^^^J  transaction,  Cohen  would  “bring  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24,  2018,  that  at  the  closing  of  the  Cohen-'^^^^ltransaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen- transaction,  however,  did  not  close.  On  or  about  January 
*29y20T87the^^^^^^^|’ attorney-emailed  attomeys-for-Sterling  and-stated-that— at  this-time- 
there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  loiow  that  after  the  Cohen-^^^^^^ieal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  intei-view  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  loiow 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 20 1 8  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-^^^^^l  transaction,  Sterling  Employee-3  questioned  Cohen  about  the  price 

Umillllllllvas  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with^^|^^| 

t.  On  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  foi  Subject  Premises-2.  On  or 
about  Januaiy  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  lai-ger  monthly  interest  payments. 

- ^.-nCSTbr  about  Februaf5rl7^018;  Cohen-emailed-Sterling-Employee»3  and-proposed 

“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  addi-ess  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen  s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructui-e  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(U)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose^®)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  malce  monthly  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 

accounts  aCFirst-Republic-Banlc^  (“Eirst-Repubhc2),_and-then-receiyed_millions__of-dollars^in_ 

consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterhng.  Cohen  set  up  these 
accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling— and  despite  being  asked  about  these  bank 
accounts  by  his  accountant^ — Cohen  misled  the  banlc  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  Fhst  Republic,  and  my  participation  in  and  review  of  reports  of 
inteiwiews  with  a  First  Republic  sales  manager  (“Fhst  Republic  Employee-1  ”)  and  a  First  Republic 
senior  managing  dhector  (“Fhst  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 
following: 


Based  on  my  review  of  a  report  of  an  intei-view  conducted  with  an  employee  of  Mehose,  I 
have  learned  that,  pursuant  to  the  participation  agi'eement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melrns^^l^ 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^^^^^^ 
hansaction.  Based  on  my  review  of  reports  of  interviews  wifi^^elros^mployees, 

^^^^^^nbransaction. 


that  Cohen  called  employees  at  Melrose  regarding  the  Cohen- 
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a.  Cohen  and  his  wife  have  been  eustomers  of  First  Republie  sinee  approxhnately 
June  2011.  Cohen  eontrols  several  eheekdng  and  loan  aceounts  at  First  Republie,  some  in  his  own 
name  and  others  in  the  names  of  eorporate  entities.  Aeeording  to  First  Republie  s  know-your- 
eustomer  reeords  on  Cohen, his  primary  physieal  address  is  the  address  for  Subjeet  Premises-! . 

b.  On  or  about  Oetober  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
eheeking  aeeount  at  First  Republie  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 

Constants  Accbuifl’’)rCbheirw^theonly^thorized-signatoixori  the  aeeount^^^^ 

aeeount  opening  doeuments,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subjeet  Premises-1.  When  Cohen  opened  the  Essential  Consultants  Aeeount,  First  Republie 
Employee- 1  eondueted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
eustomer  questions  about  the  purpose  of  the  aeeount — ^the  answers  to  whieh  First  Republie 
Employee-1  entered  into  a  fonn^**— Cohen  stated,  in  sum  and  substanee,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  eonsulting  eompany  to  eolleet  fees  for  investment  eonsulting 
work,  and  all  of  his  eonsulting  elients  would  be  domestie  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substanee,  that  his  purpose  in  setting  up  the  aeeount  was  to  keep  the 
revenue  Rom  his  eonsulting  business — -whieh  he  said  was  not  his  main  souree  of  ineome  separate 
from  his  personal  finanees.  As  set  forth  below,  there  is  probable  eause  to  believe  that  Cohen  s 
statements  about  the  intended  purpose  of  the  aeeount  and  souree  of  funds  for  the  aeeount  were 
false.  Speeifieally,  as  deseribed  below,  the  aeeount  was  not  intended  to  reeeive  and  does  not 


Certain  fmaneial  institutions  are  required  to  eonduet  sueh  proeedures  pursuant  to  the  Bank 
Secreey  Aet  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

Fu-st  Republie  Employee-1  fnst  filled  out  the  form  on  the  day  he  interviewed  Cohen,  Oetober 
26,  2016.  On  or  about  Deeember  19,  2016,  at  the  request  of  bank  eomplianee  personnel.  First 
Republie  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received — ^money  in  connection  with  real  estate  consulting  work;  m  addition,  the 
account  has  received  substantial  payments  from  foreign  sources. 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  fi-om  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 

fronrmy  revreWTjf-the-Essential  Consultants-Account-sehedule  and-public-sources,  I  Icnow-the- 

following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
LLC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  LLC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  phannaceutical  company  Novartis  International  AG  (“Novartis”)- 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Aceount  received  eleven  wire 
payments  fi'om  a  Swiss  banlc  aceormt  held  in  the  name  of  Novartis,  each  in  the  amormt  of  $99,980, 
for  atotal  of  $1,099,780. 

iii.  Beginning  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  banlc  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  fi-om  AT&T.  In  total,  AT&T  sent 

$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sehEikTCorea  Aerospace  Industries  Efd7“(“KAI”).  KAHs  a^South  Korea-based-eompany  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  banlc.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazaldrstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
friv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  J anuary  1 0, 20 1 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  lai-gely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P  .C.  (the  MDC&A  Account  ). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises-1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 

the  halMce  hrthe“account'as  ofrJanuary^7^0t8^was  $3447541^-5— As  discussed  below,-Cohen- 

never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 
during  the  negotiations  with  respect  to  the  transaction  or  the  subsequent  loan 

refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  fr-om  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KM.  At  the  top  of  the  invoices  the  address  listed 

for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 

affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 

IIj^aiid^diaerD.XbEeir&A\^^iafes7PC’’and-provided-t^ 

2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 
BTA  Banlc  and  Essential  Consultants  dated  as  of  about  May  8, 2017.  The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Banlc  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  thi'ough  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTABanlc  in  the  name  ofEssential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 

consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consultmg 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consultmg  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants]’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollai'S  ...  per  month.”  Based  on  my  review  of  reports  of  inteiwiews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  Mai'ch  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 

^^Affordable”T:hreWhf  in  the  US-Md^any-^otherAssues-mutually-agreeableAo  [Essentia 

Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundi-ed  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  m  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 

to  gain  access  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  fum,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  fi-om  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 

clients.” 
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20.  Despite  the  signifieant  amount  of  money  that  Cohen  reeeived  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Geteel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
interview  with  Getzel,  and  my  review  of  notes 
have  learned  the  following: 


il 


- — av“In  or-about-May -201-7rGetzel  met-with-Gohen-at-Subject-Premises-2— At-the- 

meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  EEC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  tire  consulting  business  to  be  between  five 


and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[a]ttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  liabilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Accormt  or  the  MDC&A  Account. 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POC  [^/c]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6, 2017,  Cohen  called  Getzel  by  telephone— which  is  reflected 
on  toll  records  for  Cohen’s  cellphone-and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 

^ccouhfrespbirded  toiGetzel”s  email  witEtheanswer  “[l]ooks  good'to  me7^ 

Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  In  a  letter  dated  October  6,  2017,  addressed  to  Getzel,  Cohen  stated,  “I  have  reviewed 
the  attached  statement  of  flnancial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterlmg  m 
connection  with  file  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and 

21 .  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  fi'om  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
loiowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  Flis  Available  Cash 

22.  hi  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  from 
Sterling  and  Mehose,  it  appeai-s  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  ofthe  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  eash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
telephone  eall  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  eash.  But,  fi-om  my 
review  of  a  summary  of  bank  reeords  that  were  seheduled  by  forensie  aeeountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  eash  and  eash  equivalents  as  of  September  30,  2017. 

MdlTonaTbras  of  Februai^72018,-Cohen-had-approximately  $6,000,0004^^ 

equivalents.  Speeifieally,  &om  my  review  ofthe  aeeount  sehedule  and  bankreeords,  I  have  learned 
the  following; 

a.  Cohen  has  three  eheeking  and/or  savings  aeeounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  aeeounts  at  Capital  One  Banlc.  As  of  February  1, 

2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  aeeounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  aeeounts  was  $1,270,600.41. 

As  of  February  1,  2018,  Cohen  had  $1,284,996.13  in  these  aeeounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.18  in  an  account  at  Signature  Bank. 

As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  totaL 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  ofFebruary  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f  As  of  September  30,  2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling, 
g.  Cohen  has  two  accounts  at  TD  Bank— one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank— Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen. 

- hr-In-total7as-ofSeptemberA0r20T7yGohenhadatleast$4,7T3T935.08inhisaeGOunts- 

at  Capital  One  Bank,  City  National  Banlc,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley.  As  of  February  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Banlc,  City  National  Banlc,  Signature  Bank,  First  Republic,  and  Morgan 
Stanley.^^ 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Mehose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Empioyee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee-1  and  two  Mehose  employees,  it  is  my  understanding  that  that  Sterling 
and  Mehose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Banlc  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 

24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
cormection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  Imow  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  mUlion,  or  that  he  was  earning  approximately  $60,000  per  month  in 

*-interesf  income-in-connection-with-thaf  loan- BuVfrom-my-r&view  of  a  summaiy-otbanlc-records_  _ 

that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 
documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  Mai'ch  12, 
Cohen  agreed  to 

$2,000,000.^°  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and  amended  the  promissory  note,  and  restructured  the  loan  to 

increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  ^  Florida.  On 

or  about  April  8,  2015,  Cohen  and  ^^^Brestated  the  promissory  note  to  increase  the  prmcipal 

amount  to  $6,000,000.^^ 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terns  of  the  amended  and  restated 


20 


I  learned  from  Getzel  that 


The  note  states  that  the  loan  is  to 
jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  ‘j 
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promissory  note,  Cohen’s  loan  toj^^^Hs  an  interest-only  loan,  and  that  the  principal  balance 
of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  know  that  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require  ^^^^to  pay  Cohen 
approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 
requires  tlra1^^^^|'epay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  banlc  records,  I  have  learned  that,  consistent  with  the  terms 

of  the-  amended— and- restated-promissory  -notej^^^^^^l  has  ^-made-monthly  payments-of- 
approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 
by  Capital  One  Banlc,  I  have  learned  that  ftom  April  2015  to  October  2015,  Cohen  received  checks 
from  an  entity  called^^^^^^^^^^^^^^^^|.  totaling  $61,250  per  month,  which  he 
deposited  into  his  personal  banlc  account  at  Capital  One  Bank.^^  It  appears  fi-om  my  review  of  bank 
records  and  public  sources  that  the  owner  of 

From  my  review  of  records  maintained  by  Capital  One  Bank,  I  have  also  learned  that  since  October 
2015,  Cohen  has  received  checks  h'om  an  entity  called  totaling 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Banlc.  It 
appeal's  fi'om  my  review  of  bank  records  and  public  som'ces  that^^^^^  s  also  the  owner  of 

total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  from 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  20 1 5  and  20 1 6  tax  returns  obtained  via  subpoena  and  fi'om  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


In  April  2015,  Cohen  received  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but  ^^^^^Hiften  made  the  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  fromHHto  Sterling  or  Mehose,  or  list  it 
on  his  tax  returns.  I  have  also  learned  that  while  this  interest  ineome  is  taxable,  Cohen  did  not  tell 
Qetzel-his  accountant-about  the  income,  and  Qetzel  only  learned  about  the  income  because  he 


began  doing  ^^^Htaxes  in  2017?^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 

^^B-in  order  to 


withheld  infomation  relating  to  the  interest  income  he'is  receiving 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

Cohen  Had  a  Side  Agreement  With 

26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 

Cohen  not  only 


interest  in  taxi  medallions  and  the  associated  debt  to 
misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 


had  negotiated  with| 


it  appears  that 


l.greed  to  pay  an  above-market  price 
lipproximately 


for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  | 

$3.8  million  in  cash.  Specifically,  fi-om  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee-1,  Sterling  Employee-2, 

and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following; 

a.  On  or  about  September  5, 2017,  an  executed  tenn  sheet  was  circulated  by  Sterling 


Employee- 1  to  Cohen  and| 


Subject  Premises-1.  According  to  the  teim  sheet, 

from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that 


The  term  sheet  listed  Cohen’s  address  as  the  address  for 
|||||||mH|[;vould  borrow  $20,000,000 


Iwas  to  acquire  from 


23  Accordingly,  this  interest  income—which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — is  included  herein  in  calculations  of  Cohen’ s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  tolliHI  or  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 

describing  the  tenns  of  the  Cohen-^^Hi^^®^‘'^^°^ 

frotnrelfiorahypdpfents-fr-olnCohenfro-^^^Bincludm^^^ 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  mai-ket  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that^^^f^greed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 

any  payment  to 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 
had  a  side  agreement  with  pay  sum  of  money  for  entering  into  the 

medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 
according  to  Sterling  Employee-3,  the  price  that  ^^^|was  paying  for  each  medallion 
appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 

side  agreement — and  never  had  a  side  agreement 

27.  While  Cohen  and^^^^|  did  not  disclose  any  payment  from  Cohen  to 
oommunioations  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel.  and  my  participation  in  an  interview 
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with  Getzel.  I  have  learned  the  following,  in  snbstanee  and  in  part,  regarding  the  proposed  side 
payment  from  Cohen 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows  ;  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 

^“enttiestoaBuyerwhbwill^IssuiSfrfEe^^^ 

debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”2^ 
b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 
payment  of  $3,800,000  to  G^^zel  did  not  loiow  where  Cohen  was  going  to  obtain 

$3,800,000  to  pay  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and|^^|was  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  USAO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 

laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


24  reference  to  thto  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  maldng  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 
Prom  my  reviefC of  public^ sour^S7Thave  leamedrtheTollowing. 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com.  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  acfess  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occuiTed  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11, 2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  . .  emanated  from 
a  sleazy  and  disgusting  website. ...  The  Tmmp  Organization  and  Donald  J.  Trump  will  be  bringing 
a  lawsuit  .  .  .  [and]  Mr.  Trump  and  tlie  Trump  Oi'ganization  would  like  to  thank  and  commend 

Stormy  Daniels  and  her  attorneys  for  then  honesty  and  swift  actions.  ’ 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 

campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  My  19, 2016,  Tramp  offieially  became  the  nominee.  Based  on  my  review 
of  public  sources.  1  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Tramp  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CllN  to 

defend  Trump’s  polling  numbers. 

32.  On  or  about  Oetober  7,  2016,  The  Washington  Post  published  online  a  video  and 

^oomp'anying^audioln^loirTThinp^rbferfe^^^^ 

terms”  in  a  2005  eonversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  Oetober  8,  2016,  Trump  appeared  in  a  video  in  whieh  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regi-et  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  Imows  these  words  don’t  refleet  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  publie  sourees,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
eomment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  Oetober  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summanzed 

ma2018email obtained pursuanttotheCohenEmailWarrants:  “In Oetober 2016,lwas contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  20 1 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford. 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 

Kc.  (“AMI’’),Alirpuhlisher^of  theWatfora/^En^w/re;'’,^®  Trumpr  and  Hope  Hicks,-who-was-then- 

press  secretary  for  Tiiimp’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  Eom  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

25  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

22 1  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talldng  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 

41 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  42  of  269 


Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  201 6,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  agam  for 
about  two  minutes. 

- ---Xr739-^-ijHnediately-aflerthe-secondeall-with-ffiGla-ended,Xohen_o^^^^ 

David  Pecker  (aa  noted  above,  the  President  of  Anrerican  Media  Inc,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximatciy  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
ftom  Dylan  Howard  (as  noted  above,  the  Chief  Content  Offtcer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 

other. 

d.  At  7:56  p.m,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hiclts  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  tor  nearly 

eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  reeeived  calls  from  Howard  and  spoke  to  him 
tor  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls.  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let's  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  ‘ICeith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford,  At  3:31  a.m.,  now  on  Oetober  9, 2016,  Cohen  sent  Howard  atext  message  in 
response  that  said:  “Thankyou.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  1  formed  a  week  ago.  Whenever  you  walre, 

please  call  my  cell.” 

f  Tlie  following  day,  on  October  10. 2016,  at  10:58  a.m.,  Howard  sent  a  text  message 

lo  CdiTand  Dh^idsom  which-sTaiarKeithMiehael:-eonneeting.^you  bofr 

business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  yon  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  atext  message 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,"  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 

then-candidate  Trump.^** 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
Icnow  that  on  or  about  Oetober  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 


28  As  set  forth  below  AMI  was  also  involved  in  a  payment  to  model  Kai'cn  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity 

the  negotiation  of  a  payment  to  Chfford,  the  execution  of  the  agi-eement  ^  . 

° ,  .p  ,  niffrirri  T  believc  that  these  communications  were  related  to  Cliffor  . 
ShluyTS  on  “  o"  by  McDougal.  I  have  lemned  dm.  she 

Saemen.  w^th  AMI  several  months  prior  to  fliese  communications  between  Cohen 

and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  defme  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agi'eement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blanlc.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  then 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 

Im^gationrrbeWe-tharDavidsoTrwf  Cohen  this  partially-signed^‘^side4ett^^^ 

order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10,  2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  fi-om  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  flrom  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 

the  following: 

a.  On  the  morning  of  October  13,2016,  at8;54a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Peeker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  enctypted  text  messages  and  make 

encrypted  calls. 
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b .  At  9 :23  a.m.,  Cohen  sent  an  email  that  stated  “eall  me”  to  First  Republie  Employ ee- 
2.  The  email  attaehed  documents  from  the  Secretary  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 

7n  th^naineof^olfrtioii  Cm^IW 

on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fimd  the  account.  As  a  result,  the 

account  was  never  opened. 

c.  On  October  1 7,  20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 

That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  thi’eatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 

iCloud  Warrant,  and  public  som'ces,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 

Cohen’s  email  acoomithosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 

agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howai'd  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded.  Call  me. 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5 :25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  talcing  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  Iddding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  US  AO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  lie  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howai'd  and  they  spoke  for  nearly  four  minutes, 

c.  The  following  day,  on  October  18,  2016,  TheSmokmgGMn.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called;  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 

article  noted  that  Clifford  had  declined  to  comment. 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 

Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  WaiTant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  followmg: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  statmg: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  callmg  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 

minutes.  At  7:11  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 

and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Tramp  agam  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m.— less  than  thirty  minutes  after  spealdng  with  Trump— 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  m  the  second 
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email,  “for  Essential  Consultants  EEC.”  That  person  responded  with  the  fding  receipt  two  mmutes 
later  at  9:06  a.m.  and  with  the  eertifloation  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortlyafterthat,CohencontaetedFirstRepublieEmployee-2andtoldhim, insum 

and  substance,  that  he  decided  not  to  open  an  account  in  flte  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  dte  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 


Repubhc  taanST^cr^ss^^strcet  tr^enthc  aceoum.  soFKRepubl«mployee-2calletfFirst 

Republic  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m..  First 
Republic  Employee-1  called  Cohen.  I  know  fi-om  my  parUeipation  in  an  interview  with  First 

Republic  Employee-EthataroundthetimcofthecallhewenttoCohen'soffice  in  Trump  Tower- 

on  the  same  floor  as  the  Trump  Organization-and  went  through  account  opening  queaions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customcr  questions  about  the  purpose  of  the  account-^c  answers  to  which  First  Republic 
Employee-1  entered  into  a  form-Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
EssenUal  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  flom  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  &nds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson, 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  spealc?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 

^Howard  a:texTmelsage,  statrn“g7^a^^^^^^^^ 

and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thanlc  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  fimds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 

minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000— with  the 
funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  baiilc  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  landly  confirm  that 

the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
papei-work  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 

your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 

Banlc,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account- 
which  had  been  fimded  a  day  prior  from  Cohen’s  home  equity  line  of  credit-to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instnictions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  statmg:  I 

confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  coivect  corporation,  (Essential  Consultants  EEC). 
Plaintiff  s  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 

will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 

payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 

with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  banlc  reeords,  I  know  the  following; 

50 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  51  of  269 


a.  On  October  28, 2016,  at  11:48  a.m.,  Cohen  spoke  to  Trump  for  approxnnately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  ealls  to  Davidson,  Peeker, 
and  Howai-d  throughout  the  day,  although  it  appears  he  may  only  have  eonneeted  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanlced  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  veiy  good.”  Howard  also  texted  Cohen  7708  p:hf7“Keitlr  [Davidson]  says  - 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Exeellent”  to  Davidson.  At 

approximately  10:30  p.m.,  Cohen  spoke  to  Hieks  for  three  mmutes. 

c.  On  Oetober  31,  2016,  Cohen  ealled  Howard  at  8:22  p.m.  and  they  spoke  for  over 

three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  firom  both  Howard  and  Davidson. 
Howard  said:  “Yon’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  yon”  to  Howard  and  “Thanks 
Keith.  Will  call  yon  then”  to  Davidson.  From  my  involvement  in  this  invesUgation,  I  believe 
Davidson  was  refeming  to  a  signed  nondisclosur  e  agreement  when  he  told  Cohen  that  he  would 

receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  Oetober  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “eonfidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  whieh  “Peterson” 
agreed  not  to  disclose  certain  “confidential  infoimation  pertaining  to  [Dennison]”  in  exehange  for 
$130,000.  The  agreement  provided  that  “EC,  EEC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  refen'ed  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  ti'ust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  Hie  wire  had  the  aimotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confiiiination,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Tmmp;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Dralce 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Tramp,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4,  2016,  just  thi-ee  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  reeords,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  soui'ces,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
fraction.  Specifically,  I  have  learned  die  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
witfrHoward,^PeckeFand  Davidson.  For  ihstahce,  at  approxifnatelW 4y49^.iSi7Cohelh^nt  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  um-eachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeai'ed  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  tiie  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  I  think  it  11  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
myinvolvement  inthisinvestigat^^^^^^  believe^lien  was7eferring  to  Trump  when  hbstafed  “he’K- 

pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hides  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 

David  quicldy?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  linlcs  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  eontradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-refereneed  reeorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
eould  be  used  to  influence  potential  negative  media  relating  to  Tmmp,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hieks  to  Cohen,  I  believe  that  later  that  morning,  Pecker 

spoke  to  Trump. 

41 .  On  or  about  November  8, 2016,  Trump  won  the  eleetion  for  President  of  the  United 

States. 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  fnst  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  govermnent 
watchdog  group,  filed  a  complaint  with  the  Federal  Eleetion  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  malcing  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 

have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  eomplaint, 
Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 
Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen  s  behalf. 

In  October  2016, 1  was  eontaeted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  ineluding  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtune 
speeial  eounsel  and  protector,  I  took  it  upon  myself  to  mateh  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  ’t 
mean  that  it  doesn’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Tramps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acloiowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...t/ie  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  brealcing”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  fransaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  awai'e  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  hun,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  I  can  t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that;  “In  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Chfford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbiu'sed  me  for  the  payment,  either 

directly  or  indirectly.” 

43.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  fransferred  internally  to  my  LLC  account  in  the  same  banlc. 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  maldng  an  in-ldnd  conhibution 
to  Trump  or  the  Trump  campaign  in  the  foi-m  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  hirb^avToiTtoward  women,  evehffhouglTalleg^ations  of  an-affair-^between-Trump-and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  commimicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45 .  Based  on  the  foregoing,  my  review  of  records  produced  piu'suant  to  subpoenas  and 
the  Cohen  Email  Wanrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  tlie  Subject  Premises  and  Subject  Devices  have  been  used  m 
furtherance  of  the  Subject  Offenses  and  are  lUcely  to  contain  instrumentalities,  evidence,  and  fimits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen  s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1.  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  Eust)  Subject  Premises-1.  From  my  review  of 
Coheri^  talTTetumk^  he" IMs^hislprimary  residence  as-Subj ecLPremises-1— Additionally^ 

from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Premises-1  as  his  home.  For  example,  on  or  about  September  28,  2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incoi-poration  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  18(d).  The  consulting  agreement  between  Essential  Consultants 

and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra  \  19(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen  s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  *|  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 
I  Icnow  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 


interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 

AOTier“sEp^ofWfdxiAnedalh^EECs7the”revenue-thaCthose-medallions^generate, 

transaction  with  Sterling  in  2014  to  re-finance  the  medallion  loans  that  were  then  with  Capital  One 
Bank. 


b.  From  my  review  of  records  maintained  by  Sterling,  I  also  loiow  that  Sterling 
addressed  documents  relating  to  the^^^Jtransaction  and  Cohen’s  attempts  to  modify  the 
terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance,  Sterling  addressed  the 
transaction  term  sheet,  supra  f  16(1),  and  its  demand  letter  and  notice  of  default,  supra  *| 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Pi-emises-1  likely  contains  evidence 
concerning  the  ^^^Jtransaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 
records— such  as  records  relating  to  a  payment  from  Cohen  to  ,^^^^|-were  concealed  from 
Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 


that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  knowledge 


of  the  documents. 

c.  From  my  review  of  records  maintained  by  First  Republic,  I  Icnow  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  fl  18(b),  18(e).  Accordingly,  it  is  likely  that  Subject 
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Premises-1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
horn  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  hansactions  or  the 

existence  of^ndFin^ccourh^^  ' 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Stanley,  City  National  Bank,  Signature  Banlc,  and  Bethpage  Credit  Union,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-!  contains  records  relating  to 
these  accounts,  including,  among  other  things,  banlc  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  thmgs,  Cohen’s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  banlc  accounts  or  assets  that  weie 
not  disclosed  to  Sterling  and  are  not  presently  Icnown  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  supra  1 16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”^°  The  value  of  these  investments 
was  omitted  fi-om  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  mvestments  from  his  2017 


30  Based  on  my  participation  in  an  interview  with  Sterling  Employee-3, 1  have  leained  tha 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  m  overseas  entities  on  is 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  future  mvestments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-1  is  Cohen  s  primary 
residence  and  he  uses  Subject  Premises-1  as  the  mailing  address  for  banlc  records,  there  is  probable 
cause  to  believe  that  account  statements  for  unlcnown  bank  accounts  or  assets  concealed  fi-om 

Sterling  are  likely  to  be  found  in  Subject  Premises-1 . 

f  Based  on  my  review  of  records  maintained  by  AT&T  and  produced  pursuant  to  the 

Cohen  Email  Warrants,  I  Icnow  that  the  address  Cohen  provided  to  AT&T  for  Essential  Consultants 

^islheadS-ess  for  Subject  Premises-TTW^^^^^ 

believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 
Consultants  or  money  that  Cohen  received,  thi'ough  Essential  Consultants,  fi-om  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  arrangements  that  Cohen,  toough  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  GetzeT  s  accounting  firm,  and  emails 

produced  pursuant  to  the  Cohen  Email  Warrants,  I  have  learned  that  GetzeT  s  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  retui-ns.  supra  1  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  GetzeTs  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordmgly, 

Cohen’s  tax  records  are  lUcely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  banlc  records  and  publicly-available  documents,  I  know  that 
Cohen  used  $130,000  fi-om  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises-1  is  lilcely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 

pertainmg  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pui-suant  to  the  Cohen  Email  Warrants  and 

iCloud  Wan-ant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 

l^dacBoiimoTo^ssWiaoudaccdiiiir^Ba^^^^^ 

Apple  pursuant  to  the  iCloud  Warrant,  I  loiow  that  electronic  devices  linlced  to  Cohen’s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 

discussed  below  ai'e  likely  to  contain  evidence  of  the  Subject  Offenses. 

j .  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  WaiTants,  I 

understand  that  Subject  Premises-l  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  foifh  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  m  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
from  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  furnishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dinmg  Room  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.^^ 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squfre  Patton  Boggs  and  Cohen, 
andfrny  revieW^bf fhe  press  release  on  Squire  Patton  Boggs’s  website,  I  knowdhat  Cohen  has  an 
office  at  Subject  Premises-2.  See  supra  fl  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement  with  the  law  fum,  he  has  “dedicated  and  segregated  office  space”  in  Squire 
Patton  Boggs’  s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.’  See 
supra  f  19(e).  Additionally,  I  know  that  under  the  teims  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs’s] 
computer  network  system.”  I  know  from  my  participation  in  an  inteiwiew  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  laiow  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signatoe  block 

As  noted  below,  based  on  my  ti'aming  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  talcen  some  evidence  fi'om 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  nature  of  Cohen’s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  1  Icnow  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  1  Icnow  from  an  aifrcle  in  Vanity  Fair 
published  on  or  about  February  14,  2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  February  2018. 

- 497 - There  is  also^Tobable  cause  to  believe  that  SubjecrPremises-l  is  likely  to  contain- 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Wannnt,  as  well 
as  my  training  and  experience,  I  Icnow  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  ^  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  1 
Icnow  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  See  supra  19(a),  19(b).  Therefore,  there  is  probable  cause  fo  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  tlirough  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  Icnow  that  Cohen 
continues  to  enter  into  consulting  airangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indieate  that  Essential  Consultants  is  loeated  at  Subjeet  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consultmg 
an-angements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unlcnown  consulting  arrangements  that  Cohen  has  with 

other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  firm,  and  emails 

^produced:  pursuanCtodi^CTenEmaE  as  well  asTny-participationin-an  to 

Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 
See  supra  1 20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 

and  infoi-mation  regarding  his  finances  will  be  found  m  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  mamtams 
a  computer  in  Subjeet  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appeal's  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contams 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 

Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  mdividuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business-such  as  contracts  with  clients 
and  records  of  payments-at  the  business’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 
will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular: 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Banlc.  In  or  about  November 

20r77akColieir^kreceivingkubstaffialincoinfrfrdnrcon^ltingWrk=wbichhe"drdmot  disclose^ 

to  Sterling^ — Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  lUcely  did  not  disclose  to 
Sterling.  Indeed,  based  on  my  fi-aining  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10,  2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5:39  on  that  date.^^  Based  on  my  review  of  toll  records,  I  know  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later  - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 


The  entry  in  the  bank’s  log  book  does  not  specify  whether  this  is  A.M.  or  P .M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5 :35  and  5 :39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  Febraaiy  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  around 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’s 
client  —  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 

Cain^igiT  Fihahce^Offenses,  mch  as^ommmts^relevant  fofth^Cohen’ s  dealing  with^Keith“ 

Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 
to  leave  in  his  apartment  where  conshnction  workers  would  be  present.^^ 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 
instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following; 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  See  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  con-esponding  with  the  media  and  sent  himself  and  others  statements  about 
Ms  involvement  in  the  payment  to  Clifford.  See  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 


As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  lai-ge  volume  of  hard  copy  documents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 

in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  30, 2018,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  tlian  $1.25  million  in  cash.  See  supra  fl 
16(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
toTiis  ongom^e^iafibhswitlT Steflih^ithhiin fASu6jecfPfemikes^4^  to ref^ence 

consult  them  in  connection  with  these  negotiations. 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini, 
and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linlced  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  -  Cohens’  permanent  residence  -  to  place 
telephone  calls  and  bacloip  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  fiavel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accorduigly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
electronic  devices,  including  Subject  Device-1,  Subject  Device-2,  and/or  certain  Apple  products, 
that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  loiow  that 
Subject  Device- 1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regarding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unloiown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 

warrantsoughthereinai-e  executed.  IfCoheniswithin  Subject  Premises-4  atthatmoment.  Subject 

Device-1  and  Subject  Device-2  -  his  cellphones  -  will  lilcely  also  be  within  Subject  Premises-4. 

lfCohenTs"m>twithinyubjecrPrenirses-4atthatHomehf,^^^^^ 

wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device-1  and  Subject  Device-2 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  waivant 
seeks  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subj ect  Premises)  at  the  moment  the 

warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises.4  contain  electronic  devices  that  are  lilcely  to  contam 

evidence,  Ifuits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 

Device-1  and  Subject  Device-2  ai'e  themselves  electronic  devices  that  are  likely  to  contam 

evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 

pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 

data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 

MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  probable 

cause  that  Subject  Premises.2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 
Subjeet  Offenses  for  the  following  reasons: 

a.  As  deseribed  throughout  this  affidavit,  Cohen  used  email  to  send  and  reeeive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
reeeive  eommunieations  with  Sterling,  Ffrst  Republic,  Getzel,  the  entities  to  which  he  is  providing 
eonsulting  seiviees,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
alreaiiy  been  obtained  viasubpoenas  and  kear  eh  warrants, Tlcnow  from  my  training  and  experience 
that  individuals  ean  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  eopies  of 
those  emails  on  thefr  hard  drives.  I  also  know  that  individuals  often  have  multiple  email  aeeounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  loiow  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  lUcely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subject  Premises-1,  Subject  Premise-2  and  Subject  Premises-4  likely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  fi'om  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  then- 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  elecfronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  Icnow  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  then  financial  transactions  to 
their  devices.  Accordingly,  there  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 
contain  evidence  of  banldng  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 
did  not  disclose  to  Sterling  or  Mefrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  usmg  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contam  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  chats  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 


2017.08.02 


71 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  72  of  269 


55.  Based  on  my  training  and. experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occurred.  This  is  typically  true  because: 

®  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

•  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted”  on  a  home 
computer,  the  data  contained  in  the  file  does  not  actually  disappear,  but  instead  remains 

on  the  hard  drive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  cannot  be 

stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  the  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,”  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 
pages.  Thus,  the  ability  to  retrieve  from  a  hard  drive  or  other  electronic  storage  media 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user’s 
operating  system,  storage  capacity,  and  computer  habits. 

®  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition,  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  drives,  flash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfiilly  submit  there  is  probable  cause  to  beUeve  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particulai-,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  m  Sectiop  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 
the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 
Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
coixespondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  Eansfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  |||^^^H|||||||nd/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

e.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accoimts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  soiu'ces,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 
Cohen  andj^^^^^^^^^and  any  payments  by^^^^|;o  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  thefr 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howai'd  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Tramp  Campaign,  and  coordination  or 
consultation  with  the  Tramp  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  a¥out  the  Access  Hollywood  tape  and  other  potential  soTirces  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

n.  Evidence  relating  to  any  reunbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 

contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  natui-e  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  pmpose  or  nature  of  any 

financial  transactions  involving  that  financial  institution; 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

III.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  4 1  (e)(2)(B)  provides  that  a  wamant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  foi  a  number 

of  reasons: 


•  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

•  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intentional 
modification^or  destruction,  comput^devices  ai-e  ideally  examined  in  a  controlled 
environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  malce  a  forensic  copy  of  the  storage  media  that  can  be 
subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data. 

®  Thu-d,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  persoimel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

®  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  fi-oni  a  computer 
device,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  time  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein,  Squire  Patton  Boggs  is  a  functioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  persormel  will  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  notbe  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  deteimine  which  files  and  electronic 
devices  within  Subject  Preniises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  vrill  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  fi-om  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 

'personnerinvolvedln&eln7estigation,lneI^ 

in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 
appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate  and  apart  ftom 
the  investigative  team,  in  order  to  review  potentially  privileged  eommunieations  and  determine 
which  cormnunications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  ftom  my  training  and  experience,  as  well  as  ftom  information  found  m 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unloek  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (eolleetively,  “fingerprint”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  know  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  infi-ared  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  refen-ed  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device’s  contents. 

63 .  In  some  circumstances.  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include:  (1)  when  the  device  has  just  been  turned  on  or  restarted;  (2)  when  more 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  laiown 
to  law  enforcement.  Thus,  it  will  likely  be  necessaiy  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  fi'ont  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otherwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingerprints  are  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  loiow  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 
Tirthe^venFthar law  enforcement  is  unable  to  unlock  the  Subject  Devices  as  described  above 
within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 
entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 
materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 
available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 
the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 

69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  persoimel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
cohtiolXwillTeview  the  ESRontainMlKefeiiTfor^infortmtion  responsive  to  the  w^ 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 
to  determine  which  files  or  other  ESI  contain  evidence  or  finits  of  the  Subject  Offenses.  Such 
techniques  may  include,  for  example: 

•  surveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  determine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance); 

®  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

®  performing  electronic  keyword  searches  through  all  electronic  storage  areas  to 
determine  the  existence  and  location  of  data  potentially  related  to  the  subject  matter  of 
the  investigation^'*^;  and 

a  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Keyword  searches  alone  are  typically  inadequate  to  detect  all  relevant  data.  For  one  thing, 
keyword  searches  work  only  for  text  data,  yet  many  types  of  files,  such  as  images  and  videos,  do 
not  store  data  as  searchable  text.  Moreover,  even  as  to  text  data,  there  may  be  information  properly 
subject  to  seizure  but  that  is  not  captured  by  a  keyword  seai'ch  because  the  infonnation  does  not 
contain  the  keywords  being  searched. 
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71.  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

72_  IftheGovernWtdetenhinE^thdrthrelectfbnic-^^^^^^ 

to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  um-eadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fr-uit  of 
the  crhninal  activity,  (iii)  contraband,  (iv)  othemise  unlawfrilly  possessed,  or  (v)  evidence  of  the 

Subject  Offenses. 


80 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  81  of  269 


IV.  Conclusion  and  Ancillary  Provisions 

73 .  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attaehments  A,  B,  C,  D,  E  and  F  to  tliis  affidavit  and  to  the 
Search  and  Seizm'c  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  eontinuing  investigation.  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 

Court  orders  otherwise. 


/ 


Special  Agent 
FBI 


Sworn  to  before  me  on 
8th  day  of  April,  2018 


"^-^1 

HON.  HENR^  $.  PITiyi/Wl 
UNITED  states  magistrate  JUDGE 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-l”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein. 

Apartment  Hlocated  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the  the  building. 


n.  Items  to  Be  Seized 


A,  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-1  ai'e  evidence,  frmits,  and  instrumentalities 
of  violations  of  18  U.'S.C.  §§  371  (conspfracy,  as  it  pertains  to  the  other  Subject  Offenses)  1005 
(false  bank  enfries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fr-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agi'eement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^|^nd/or  entities  associated  with  hun. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  natui-e 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalent^ 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  throng 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 

2013  to  the  present. 


g.  Evidence  relating  to  agi'eements,  loans,  and/or  financial  transactionsbrtw^ 
Cohen  entities  controlled  by  the^^^^H^H 
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and  any  payments  by  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephame  Clifford  or  Karen  McDougal. 

i  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
lSvTreili:iSrerDrarH0Wd-ab™rD0-rald1:mmpr 
Clifford,  and/or  Kai-en  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trmnp  Campaign. 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tmmp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  foi 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  I,  2013  to  the 

present. 


p  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  ^ 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  aooomt  at ^ 
financial  institution;  the  source  of  fimds  flowing  into  an  account;  or  the  ‘j;’ 

financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 


q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 


S.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-l  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.  A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBoo  , 
any  other  deslctop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  waiTant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-1  also  include; 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar-  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  mformation 

—concerning  the  configuration-of the  seized  or-Gopiednomputer-devicesnnstorage.media. - 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staf^  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
govei-nment  control)  ai-e  authorized  to  review  the  ESI  contained  therein  for  information  responsive 

to  the  wan-ant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  foi  example. 


•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

®  scanning  storage  ai-eas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

.  performing  key  word  searches  thi'ough  all  electronic  storage  areas  to  determine  whether 
occuiTences  of  language  contained  in  such  storage  ai'eas  exist  that  ai-e  mtimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  infoimation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  ILB  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  fi-om  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  B 


I.  Premises  to  be  Searched — Subject  Premises-2 


The  premises  to  be  searched  (“Subjeet  Premises-^')  ^e  deseribed  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therem: 

that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 

II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  Items  to  be  seized  from  Subject  Premises-2  are  f “f/oSeT^^^ 

of  violations  “f.*®  ton  financial  institution).  1343  (wire  fraud),  and  1344 

{“a^  52  u“  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegi  campaign 

contributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 ,  20 1 3  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agrement 

entifies  associaj^  whh  htatofrl^^ 

liabilities,  to  others,  including  to 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 

Tn  -j  -p;  rsrvmp  tn  Michael  D  Cohen  &  Associates,  including  any  documents 

Srou^?^^^^^  o"cl  D.?ota“  Xtes.  ’ 

1  +•  +rv  r'riVipn’<?  net  worth  available  cash  and  cash  equivalents, 

2013  to  the  present. 

a  Evidenee  relating  to  agreements,  loans,  and/or  tacial  tj||g|jsb||» 

and/or  entities  controlled  by 


Cohen  and 
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and  any  Cohen,  from  Januaiy 

1, 2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

_ j. _ Evidp-n^p  nf  eommunications  between  Michael  Cohen  and  American  Media,  Inc., 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  otW  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  ffom  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  ffom  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II-A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 
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or  in  his  possession,  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistaiits. 
hr  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include; 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  softwai'c  manuals  or  other  mformation 

^ccmingfheWfigufitibnTifthe^iz^tm^opM'computer  devices-or  storage  med^ 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  stafk  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  teeMieal  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  mformation  responsive 

to  the  waiTant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

®  surveying  various  file  “dkectories”  and  the  individual  files  they  contain  (analogous  to 
looking  atthe  outside  of  a  file  cabinet  for  the  markmgs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

»  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determme 
their  precise  contents; 

«  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 


*  performing  key  word  searches  thi'ough  all  electronic  storage  areas  to  determme  whether 
occuiTences  of  language  contained  in  such  storage  areas  exist  that  are  intunately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  persotmel  will  malce  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n.A  and  II-B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fiom  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  waivant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pui'suant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  fiom  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  C 

I.  Premises  to  be  Searched — Subject  Preniises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  tMD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box  The  safe  deposit  box  is  m  the  name  of  Michael 
Cohen  and  Laura  Cohen. 


TT.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fmits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wne  fi-aud),  and  1344 
(banlr  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 


1  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  montlily  and  annual  income,  and  income  sources,  fi'om  January  1,  2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Tmmp  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


6  Evidence  of  communications  with  Donald  Tmmp  and/or  agents  or  associates  of  the 

Tmmp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  rmi  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  loiowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  elecb-onic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  elecbonic  storage  device  for  the  items  set 
forth  in  Section  II(A)(l)-(8),  above. 

C.  Review  of  ESI  


Following  seizure  of  any  electronic  storage  device,  law  enforcement  personnel  (which  may 
include  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government  attorney 
support’  staff,  agency  personnel  assisting  the  government  in  this  mvestigation,  and  ou  si  e 
tedSiical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 

®  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contams  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determme 
their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  mtimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  fdes, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sectmns 
II A  and  II B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  D 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  contamers  found  therein; 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

II.  Items  to  Be  Selired ^ 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fr'uits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  fi'om  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfe^mWnto^in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^^|md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  natui'e  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nafru'c 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  natm-e  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accormts  opened  in  the  name  of  Michael  D.  Cohen  8l  Associates. 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  armual  income,  income  sources,  and  other  assets,  whether  held  personally  or  thr  ough 
entities,  including  tax  retrrnrs,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  trmisaction^be^^eM 
Cohen  and^^^^^H^HH^^^^^^H^nd/or  controlled  by 
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land  any  payments  byl 


|to  Cohen,  from  January 


1,  2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  an^or 
agents  or  associates  of  the  Tntmp  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

KviHence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 


_ _ 1 _ bVlQCnCg  Ul  - - - . .  .  . 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Tmmp  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  die 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimhursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requfrements,  and  campaign  confribution  hmits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  an^or  other  a^omtants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 

present. 

p  Communications,  records,  documents,  and  other  files  reflectmg  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  flmds  flowing  mto  an  account;  or  the  ^ 

financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  he  seized  from  Subject  Pi-emises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  fallmg  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBoo  , 
any  ?thei  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  didves,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  enciyption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  mformation 
roncerning  the  configuration  of  the  seized  of  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  frierein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  waivant,  including,  for  example: 

•  suiveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  at  the  outside  of  a  file  cabinet  for  the  maikings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  detennine 
their  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

9  performing  key  word  searches  thi'ough  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  ai'e  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

9  reviewing  metadata,  system  mformation,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  wanunt. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  Irom  the  investigative  team,  in  order  to 
address  potential  privileges. 


2017.08.02 


16 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  97  of  269 


ATTACHMENT  E 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-1”)  is 
described  as  follows: 

An  Apple  iPhone  seiwiced  by  AT&T  with  the  telephone  numbe 

During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device- 1,  or  hold  Subject  Device- 1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
tcTgaih  access  tbfheTontents  of  any^uchTievice~as^thdrized  by  this  waivanfi 

n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-1  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fi-aud),  and  1344  (banlc 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  confributions) 
(the  “Subject  Offenses”)  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  Januaiy  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to  I 


land/or  entities  associated  witli  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  fr'om  Essential 
Consultants  or  the  natoe  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  natui'e  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  Januaiy  1, 
2013  to  the  present. 


Cohen  and 


Evidence  relating  to  agreements,  loans,  and/or  financial  fransactimi^^etwee^ 

land/or  entities  controlled  by 


I  o  Cohen,  from  January 


and  any  payments  by 


1,  2012  to  the  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

agents  or4egaErepresentatives,Jncluding_miy^nQndisclosure  agreement  and  related  docut^^ 

and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tmmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tmmp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Tmmp  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/ or  agents  or  associates  of  the 
Tnrnip  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tmmp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbui'sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-1,  upon 

request. 

Additionally  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pmsuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  m  order  to  address 

potential  privileges. 


2017.08.02 


19 


Case  l:18-cr-00602-WHP  Doebwnent  48-1  Filed  07/18/19  Page  100  of  269 


ATTACHMENT  F 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 

An  Apple  iPhone  serviced  by  ATj&T  with  the  telephone  numbc] 

Dui-ing  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  bylHis  w^ant. 


n.  Review  of  ESI  on  the  Subject  Device 


Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  govenunent  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  insti-umentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (banlc 
fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfeanyintoe^  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to  | 


land/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  or 
coimnunications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  Ifom  Essential 
Consultants  or  tire  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  cormection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  soui'ces,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records,  from  January  1, 
2013  to  the  present. 


Evidence  relating  to  agreemeiits,  loans,  and/or  financial  transactimi^etwem 

|and/or  entities  controlled 

land  any  payments  by  Cohen,  from  January 


1,  /ui/  to  me  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or-legaLrepresentatives,.  including- any_nondisclosute_agreements_and_telated_d_QCuments,. 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tramp  and/or 
agents  or  associates  of  the  Tramp  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  ran  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  Januaiy  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 


for  the 

Southern  District  of  New  York 


In  the.  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Four  Premises  and  Two  Electronic  Devices,  See 
Attached  Affidavit  and  Riders 


Case  No. 


APPLICATION  FOR  A  SEARCH  WARRANT 

I  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penally  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 

See  Attached  Affidavit  and  Riders 


located  in  the 


Southern 


District  of 


New  York 


,  there  is  now  concealed  (identify  the 


person  or  describe  the  property  to  be  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDERS. 


The  basis  for  the  search  under  Fed.  R.  Crim.  P.  4 1  (c)  is  (check  one  or  more) : 
sf  evidence  of  a  crime; 

ivf  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 
aT  property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 

Co(f&  Section  0)f)fcnse  Descf'iption 

18  U.S.C.  s  371,  1005,  1014,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial  institution, 

1 343  and  1 344,  and  wire  fraud,  bank  fraud,  and 

52  use  30116  and  30109  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

sf  Continued  on  the  attached  sheet. 

□  Delayed  notice  of _ days  (give  exact  ending  date  if  more  than  30  days: _ )  is  requested 


under  1 8  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


Printed  name  and  title 


Sworn  to  before  me  and  signed  in  my  presence. 


Date: 


04/08/2018 


j\dge ’s  sig 


City  and  state: 


^  c.~.  ''fc(  w  ^ 


!  signature 

Hon.  Henry  B.  Pitman,  U.S.  Magistrate  Judge 


Printed  name  and  title 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  (1)  502  Park  Avenue, 

York,  New  York  10022,  (2)  Michael  Cohen’s 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New 
New  York  10112,  (3)  Safe  Deposit  Box  # 
^(Located  at  the  TD  Bank  Branch  at  500  Park 
Avenue,  New  York,  New  York  10019,  and  (4) 

TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 

Loews  Regency  Hotel,  540  Park  Avenue,  Room 
1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein,  and 
the  Electronic  Devices  Kmown  and  Describedaa 

m  an  Apple  iPhone  with  Phone  Number 

1  and  (2)  an  Apple  iPhone  with  Phone 


NumberjBIHIIIHii 

Reference  No.  20I8R00I27 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices  )  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
information  (“ESP’).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 

estabhshing'^abi^use^^  not  include TlTth^fdcfsThafrhdTCldamedliufinrth^^^^ 

of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  ^^located  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Park  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^^Jfloor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below.  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  101 12.  The  building  located  at  30  Rockefeller  Plaza 


1  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  atrast. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 

Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 
branch  location  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 

maintained  by  TDBanlqTl^^  learned  that  the^eityde^ifboYisYppfdximatelyfw^  inches  by“ 

ten  inches  in  size,  and  is  marked  as  box^|  The  safety  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1 728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 20 18.2  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taking  possession  on  Thursday,  February  1st.  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


2  Although  the  quoted  price  contemplated  a  three-month  stay  from  Januaiy  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,^  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present.^ 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 


Premises-4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices”)  are 


particularly  described  as: 

Subject  Devic^TTs”an  Apple  iPhone  seiwiced  ByT^TffiT  witRthCtelephon^ 

Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device- 1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 


maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  m  the  Southern 


District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 


Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 


maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  m  the  Southern 


District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


^  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  faimly.  Based  on  my 
conversations  with  FBI  agents  conducting  surveillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 

5‘ 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5 .  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence, .  fruits,  and  instrumentalities  of 
violations  of  iX  U.S enfries)7“r014“(false^statemrentsA;o-a-fmanciaF 

institution),  1343  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Bank  Fraud  Offenses”), 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other- 
Subj  ect  Offenses)  (collectively,  the  “Subj  ect  Offenses”) . 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 

an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  wan'ants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  j^^^^^§gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1,  2016  and  July  18,  2017  (the  First  Cohen  Gmail  Warrant  ). 

b.  On  or  about  August  8,  20 1 7,  the  FBI  sought  and  obtained  a  search  warrant 

for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^^^|@gmail.com  (the 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  arid  obtained  a:  search 

warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 

November  13,  2017  (the  “Second  Cohen  Gmail  Warrant  ). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  account 
received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017  (the  “First 

Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  20 1 8,  the  SCO  provided  the  USAO 


Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
wamant. 


(the  “Cohen  MDCPC  Account”)- sent  or 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 

for  privilege. 

9.  On  or  about  February  28, 2018,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Aecount  and  the  Cohen  MDCPC  Aeeount,  among  other  accounts,  sent 
or  reeeived  between  November  14, 2017  and  February  28, 2018  (the  “Third  Cohen  Gmail  Warranf  ’ 

^^ndlhe'^SeconcrCohe^  MDCPC  Warrant’’)- “  Thh  content  produ^d  pursurnt  toAhese  warrants-is^ 

subject  to  an  ongoing  review  for  privilege  by  an  SDNY  filter  team.^ 

10.  The  emails  search  warrants  described  above  are  referred  to  eollectively  as  the 

“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  20 1 8,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  loeation  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  eleetronie  teehnique,  commonly  known  as  a  “triggerfish,”  to  determine  the  location  of  Subject 
Device-1  and  Subject  Device-2. 

II.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  sehemes  by  Target  Subjeet  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  ineluding  the  present,  and  (b)  to  make  an  illegal 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  eontent  on  or  about  February 
2,  2018. 

6  On  or  about  February  28,  2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  seareh  warrants  authorizing  the  search  of  emails  and  eontent  obtained  pursuant  to  previously 
issued  warrants  for  additional  subjeet  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

13.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provTdeTto  multiple  banks^~^nection  wWTfrahsactidh^intended  of- 

approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  20 1 7  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banlcs  from  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

in  coimection  with^^^^^^^^^^^  acquisition  of  the  taxi  medallions  securing  Cohen  s 
debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premises  to  (a)receive  docum^tsTeTafecTto  the  transaction  in&ded  to  relieve'Cbheh  of  hls^axl 
medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banlcs  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’ s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises- 1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen  s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

The  Banlt  Fraud  ScKefne 
(i)  Cohen ’s  Statements  to  Sterling  National  Bank 
16.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  LLCs  controlled  by  him  and 
his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (  Sterling  )  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  from  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee- 1”)  and  two  other 


’  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 

11 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  114  of  269 


Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among 
other  things,  the  following; 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  EEC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  bank,  for  which  the  medallions  s^efved^s  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 

One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterlmg 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  m  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber  taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans— lilce  the  loans  held  by 
Cohen— were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medalhons  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


«  One  of  these  companies,  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  puiposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which— 
according  to  letters  from  Capital  One  in  Sterling’s  files— was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 
Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 

abo^  Dumber  8,T0  r47eacE  of Ildhen’ sTixteeiTtaxi  mMaliidFEBCrent^^^^  loan  agreements 

and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 
December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises- 1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  maldng 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subject  Premises-1 .  In  total.  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements.  Sterling  transferred  45  percent  of  Cohen’s 
t3xi  medallion  debt  to  Melrose.® 


®  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit'Union  Administration  (  NCUA  ). 

13 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.^°  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
lr“an7actionfavorabty^iise:accountm^f5FldhihWmeM^^^^^^ 

projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-shaiing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  know  firom  records  maintained  by  Sterling  and  an  mterview  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  m  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  fi:om  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 

'°  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1,  2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015 — during  which  Cohen  told  Sterling  Eniployee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email,  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 

ihteiviewwith:StMingEffiployee^2rrhave-leamed'that”Cohen-and-Sterling-Employee=2  spoke- 

again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  1 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility— both  internally  and  with  Cohen— of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banlcs.“  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  Icnow  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Mehose  and  extending 
the  loan  maturity  date  to  December  8,  2017. 

h.  I  Icnow  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  Fred  Weingarten,  who  would  agree  to 

Based  on  my  review  of  property  records,  1  know  that  on  or  about  October  28,  2015,  around 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises- 1^ — as  collateral,  Cohen  transferred  Subject  Premises- 1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  knowthat  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 

corporate 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — hnd  because  Sterling  was  unfamiliar  with 
^^^^^^—Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1, 2017,  Cohen  told  Sterling  Employee- 1,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with^^^^^  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 
about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 

amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Mehose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 20 17,  Sterling  Employee-1  told 

that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 

term  sheet  shortly. 

j.  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  infonnation  from  the  parties.  On  or  about  June  7,  2017,  Sterhng 


2017.08.02 


16 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  119  of  269 


Employee- 1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee- 1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
tb^nformation  In  the  statement  came  from  Cohen  ahdThaTGetzel  had  nofconfirmed  its  accuracy 
or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence.^^ 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1, 1  have  learned  that  Sterling  Employee- 1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and  Allen 
Weingarten,  attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


12  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  fi-om  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  an 


The  term  sheet  included  a  cover  letter  addressed 


to  Cohen  at  Subject  Premises-1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 


about  September  5,  2017,  Sterling  Employee-1  sent 
executed  term  sheet.  According  to  the  term  sheet,  1 


Cohen. 


m.  As  part  of  the  agreement,  according  to  the  term  sheet,  $^1 ,265,9 13  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 20 1 7,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,95  6 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance  despite  its 
prior  insistence  that  Cohen  malce  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^^|transaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  fall  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1.  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6  2017  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 


30,  2017  (the  “September  2017  Financial  Statemenf’). 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^3  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  m  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 


^^3  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’ s  real  estate  assets 
and  medallion  investments. 

Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  which  was  considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen- Weingarten  term  sheet. 
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time,  he  indicated  was  held  by  a  trust)d^  The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p .  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements — i.e.,  in  or  around  September  2017 — Cohen  stopped  paying 

Ihohthl^^ldairpayments  on  his  taxi  medallTanToansmltogether.^i^ccordingi:o  Sterling  Employee^ 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-^^^^^|fansaction  was  favorable  for  the  banlc 
-  that  is,  that  ’^^^^|would  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subj  ect  Premises- 1 .  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen-^^^^^J;ransaction,  Cohen  would  bring  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 20 1 8,  that  at  the  closing  of  the  Cohen-’'^^^^|transaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-’'^^^^Jtransaction,  however,  did  not  close.  On  or  about  January 

29  2018,  the  attorney  emailed  attorneys TdFStefhng^aM  sf^^^  this  time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-^^^^|deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  Icnow 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30,  2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen^^^^^l  transaction.  Sterling  Employee-3  questioned  Cohen  about  the  price 

^^^^Hmsto^have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with  ||H||m|||| 

t.  On  or  about  January  31,2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  larger  monthly  interest  payments. 

- ^—UT~On-or-about-February4372018^Cohen-emailed  Sterling-Employee-3- and-proposed- 

“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $  1.250m.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructure  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 
r.nlien  Cnncealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 
17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Mebosei'^)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  make  monthly  ■  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 
adcoint^Tirsr  Rdpuhh^B¥nin“Fifsf  Re^^^ 

consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  malce  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling— and  despite  being  asked  about  these  bank 
accounts  by  his  accountant— Cohen  misled  the  bank  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  banlc’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  with  a  First  Republic  sales  manager  (“F irst  Republic  Employee- 1  ”)  and  a  First  Republic 
senior  managing  director  (“First  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 

following: 


Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,^! 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melr^^^to 
Mehose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-J^^^^ 
transaction.  Based  on  my  review  of  reports  of  interviews  witi^ddro^employees,  I  also  know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen-^^^^Htransaction. 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  Icnow-your- 
customer  records  on  Cohen,^'^  his  primary  physical  address  is  the  address  for  Subject  Premises- 1. 

b. .  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  Essential 

iMnsultants^Accounf’).  Cohen  ^The^onlyaulidrizTdsighatooro^ 

account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subject  Premises- 1.  When  Cohen  opened  the  Essential  Consultants  Account,  First  Republic 
Employee- 1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form^^ — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consultmg 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income— separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive  and  does  not 


Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

First  Republic  Employee- 1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received— money  in  connection  with  real  estate  consulting  work;  in  addition,  the 

account  has  received  substantial  payments  from  foreign  sources. 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
ftom  my  review  of  the~Essential  Consultants  Account  schedule  ahd^Blic  sources,"'rimow  the"" 

following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
EEC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  EEC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  ftom  Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  International  AG  (“Novartis”). 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  bank  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  whe  payments  from  a  banlc  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 
$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  1 0,  20 1 7,  June  9,2017,  July  1 0,  20 1 7,  and  November  27, 
2017,  the  Essential  Consultants  Accormt  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 

-sent-is-Korea-^Aerospace-Industries-Ltd.-(kKA.T’). . KA.Ids-a^South-Korea-rbased-Company_that — 

produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  3 1 , 20 1 7  to  on  or  about  F ebruary  1,2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises-1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above.  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 

^balan^Tntheac^count^soTJahu¥ryT,^20T8;'^$344754r;3-5.^ 

never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 
during  the  negotiations  with  respect  to  the  transaction  or  the  subsequent  loan 

refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 

Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following; 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreemenf  ’  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 


2017.08.02 


27 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  130  of  269 


($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 

for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 
affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
EEC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provihedThe  address  for  SubjeSPfemises- 
2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreemenf  ’  between 
BTA  Bank  and  Essential  Consultants  dated  as  of  about  May  8, 2017.  The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $  1 50,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 
consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consulting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1 .  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollars  ...  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the— Affordable -Care-Act  dn-the-TJS-and  -any^other— issues  mutually- agreeable-4o-[Essential- 
Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 
to  gain  access  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 
clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
with  Getzel,  my  notes  I 

have  learned  the  following: 

_ a _ ^In-or-about-May-20-L7,-.-GetzeLmet..withXohen-at-Subject-Premises-2 — At„the 

meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  EEC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[a]ttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  liabilities 
of  approximately  $45,63  0,000,  leaving  him  purportedly  over  $  12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POC  [i'/c]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6, 20 1 7,  Cohen  called  Getzel  by  telephone— which  is  reflected 
on  toll  records  for  Cohen’s  cellphone— and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  usmg  the  Cohen 
AccountTrespondedto  Getzel’s  email  with  the  answer  “[IJddh^^AdOdlne:’’ “Cohenmever  d^^^^ 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  In  a  letter  dated  October  6,  2017,  addressed  to  Getzel,  Cohen  stated,  “I  have  reviewed 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterling  m 
cormection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and^^^^^| 

21.  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  from  Essential  Consultants  to  Sterlmg 
Employee-1  or,  to  his  loiowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
loiowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen  s  debt. 

Cohen  Understated  His  Available  Cash 

22.  In  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  from 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
■  telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017. 
Additionally,  as  of  February  1,  2018,  Cohen  had  approximately  $6,000,000  in  cash  and  cash 
equivalents.  Specifically,  from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned 
the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank.  As  of  February  1, 
2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 
As  of  February  1,  2018,  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.18  in  an  account  at  Signature  Bank. 
As  of  February  1,  2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1,  2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30,  2017. 

f.  As  of  September  30,  20 1 7,  Cohen  had  $  1 7,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank — Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen. 

- — InTotalpas^oTSeptember  307^01^7Cohen  had  atTeasL$477T3;935-;08  in  his  aceounts- 

at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley.  As  of  February  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Banlc,  City  National  Bank,.  Signature  Bank,  First  Republic,  and  Morgan 
Stanley. 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Mehose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee- 1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 
and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  to 

Based  on  my  review  of  the  account  schedules  described  above,  I  Icnowthat,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Bank  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 

24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 

intere-stincomrefin  cormection-with  tha1rloanr'BuVfromTmy-review  ofa  summary“of-bank-records 

that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 
documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

Cohen  lend  approximately 

$2,000,000.^°  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  andHHH  amended  the  promissory  note,  and  restructured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  apartment  in  Sunny  Isles  Beach,  Florida.  On 

or  about  April  8,  2015,  Cohen  andJjUrestated  the  promissory  note  to  increase  the  principal 
amount  to  $6,000,000.^^ 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 


20 


I  learned  from  Getzel  that 


The  note  states  that  the  loan  is  to 
jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to 
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promissory  note,  Cohen’s  loan  to  interest-only  loan,  and  that  the  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  loiow  that  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require  P^y  Cohen 

approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  Aprd  2019.  The  note  also 
requires  that  ^^^^^‘epay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 
oflhe  aniend^^  restated  promissory  ndfe7^^^H  monthly  payments  of 

approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 
by  Capital  One  Bank,  I  have  learned  that  from  April  2015  to  October  2015,  Cohen  received  checks 
from  an  entity  callec^^^^^HHI^H  totaling  $61,250  per  month,  which  he 
deposited  into  his  personal  bank  account  at  Capital  One  Banlc.^^  It  appears  from  my  review  of  bank 
records  tha1^^^^|is  the  owner  of 

From  my  review  of  records  maintained  by  Capital  One  Banlc,  I  have  also  learned  that  since  October 
2015,  Cohen  has  received  checks  from  an  entity  called  totaling 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 

appears  from  my  review  of  banlc  records  and  public  sources  tha 

In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  from^^^^| 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  2015  and  2016  tax  returns  obtained  via  subpoena  and  from  the  Cohen 
Rmail  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


In  April  2015,  Cohen  received  a  pro-rated  payment.  F or  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but  HH  often  made  the  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  from  ^^^^Hto  Sterling  or  Melrose,  or  list  it 
on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel — ^his  accountant — about  the  income,  and  Getzel  only  learned  about  the  income  because  he 


began  doing  1 


|;axes  in  2017.^^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 
Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 


withheld  information  relating  to  the  interest  income  he  is  receiving  from  order  to 

secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

Cohen  Had  a  Side  Agree  1 1 II  iil 

26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 


interest  in  taxi  medallions  and  the  associated  debt  to 


I  Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 


had  negotiated  witbl 


it  appears  thal^ 


[agreed  to  pay  an  above-market  price 


lipproximately 


for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay 
$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  paificipation  in  interviews  with  Sterling  Employee- 1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following; 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 


Employee- 1  to  Cohen  and 

Subject  Premises- 1.  According  to  the  term  sheet J 
from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  I 


The  term  sheet  listed  Cohen’s  address  as  the  address  for 

i  would  borrow  $20,000,000 
^^^Hwas  to  acquire  from 


Accordingly,  this  interest  income — ^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — ^is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  to  or  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  terms  of  the  Cohen|^^^^^|transaction  and  the  new  loan  to 

not  mention  any  payments  from  Cohen  including  a  $3.8  million  payment.  The 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee- 1  and  Sterling  Employee-2,  they  were  never  told  tha||^|^|agreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  malce 

any  payment  to 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 
had  a  side  agreement  with^^^^^to  pay^^^^fa  sum  of  money  for  entering  into  the 
medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 
according  to  Sterling  Employee-3,  the  price  that  ^^^^|was  paying  for  each  medallion 
appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 

side  agreement — and  never  had  a  side  agreement  with 

27.  While  Cohen  and^^^^^^^^^|did  not  disclose  any  payment  from  Cohen  to 
^^^^|in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  my  participation  in  an  interview 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  the  proposed  side 
payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  an  
in  part,  as  follows;  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 

^  entities  to  ^uyer^o  wilT^ume  their  baWmddbtedhes^lpDirthL  [Cohens ’-]-payingMown-the 

debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^^ 


b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 


but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 


payment  of  $3,800,000  to 


As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 


$3,800,000  to  pay 


cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

28 .  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and^^^^^^|vas  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  to  HHIilHi 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  US  AO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $  130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 
307  From  my  review  of  publicTources7 T have  learnefr  the  following; 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b .  Specifically,  on  or  about  October  11,2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  remoyed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 
a  sleazy  and  disgusting  website. . . .  The  Trump  Organization  and  Donald  I.  Trump  will  be  bringing 
a  lawsuit  .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  lilce  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Po.s't  published  online  a  video  and 

_ accompanying-audio  in-which-Trump  referred-to-womenjn-what-the  article-describecLasfAulgar- 

terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  oi Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  loiows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  20 1 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants :  “In  October  2016,1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  'mcXndmg  ABC  News,  were  pursuing  the  2011 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’ s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 

IncT(“AMF’)7the^publishermf  the-7Vat/o«a/-iin^wz>er,^^  Trump-and-Hope  Hicks^who  was-them 

press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

^^^^'|kthT,HnEnediately^fteFthe“secdnd^all^lth  Hteks“ended7Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 

other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 

eight  minutes. 

e  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said. 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said;  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f.  The  following  day,  on  October  10, 2016,  at  10:58  a.m.,  Howard  sent  a  text  message 

to  Coh^  and  Davidson,  which  statedd  HCAifh/MichddlTWohheHihOoWblStr  i^^^ 

business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanlcs.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  client  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreemenf’  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The' purpose  of  the  document. 


As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreemenf  ’  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10,  2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  Ftowever,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  First  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretary  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 

in-the-name-ofttResolution-ConsultantsTopened  immediately,-andthat-he  did  not-wantamaddress 

on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 
account  was  never  opened. 

c.  On  October  17,  2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  know  the  following:  '  . 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’ s  email  account  hosted  by  the  Trump  Organization,  on  October  1 7, 20 1 6,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 

agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 

tabloid  newspaper. 

ii  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 

seconds.  This  was  Cohen’ s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5 :25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach? 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


29  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  emai 
referenced  in  this  article. 
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investigation,  I  understand  Howard’ s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Porn 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.,  However,  the 

article  noted  that  Clifford  had  declined  to  comment.  _ _ 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 :04  a.m. — ^less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  EEC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  F irst  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  street  to  open  the  account,  soTirst  Republic  Employee-2  called  First 
Republic  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m..  First 
Republic  Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
Republic  Employee- 1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’ s  office  m  Trump  Tower- 
on  the  same  floor  as  the  Trump  Organization— and  went  through  account  opening  questions, 
including  Icnow  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form— Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based,  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Accounf’)  was  created  at  a  time  between  11:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Banlc. 

f  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2 ’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call ftie.  important.”  Cohen  called  Howard  at  7.00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated.  Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  fliink.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 

minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000— with  the 
funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 

the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  m  advance  for 

your  assistance  and  look  forward  to  hearing  from  you  later. 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit  ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating.  I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  EEC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 

will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 

payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  Icnow  the  following: 
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a.  On  October  28,  20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KiD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  2018,1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$  1 3  0,000.  The  agreement  provided  that  “EC,  EEC”  would  wire  the  funds  to  “Peterson’ s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
^h  a^clure”df  a  FedEx  deTn^^orTfirinatidn,  statihphaf  at  approximately  9 :09Ti:mTa“p'a-ckage- 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour-  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40 .  On  November  4,  20 1 6,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affah.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 

a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Tmmp  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  um-eachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  carmot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’ s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  puiported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  thinlc  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approxhnately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m..  Hides  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  horn',  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praymgi!  It’s  worldng!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
tune.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning,  Pecker 
spoke  to-Trump. - . — 

41.  On  or  about  November  8, 20 1 6,  Trump  won  the  election  for  President  of  the  United 

States. 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  dmft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affrir  between  Mi'.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  ’t 
mean  that  it  doesn’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
ti-ansferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...the  2011 

story...''),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14, 2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that;  “In  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbui-sed  me  for  the  payment,  either 

directly  or  indirectly.” 

43 .  On  or  about  March  9,2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transfeiTed  internally  to  my  LLC  account  in  the  same  banlc. 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  making  an  in-kin4  contribution 
to  Trump  or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $  130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
^out  hl^ehawoFfovvard^wOTnuh^'^eveiiAhougff  alleptidhkADT^iTaffmf  baweM"^^ 

Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  malte  evident 
that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45.  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 

the  Cohen  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 

probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  in 
furtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises- 1  and,  at  least  in  part,  works  at  both  Subject  Premises- 1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises- 1 .  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises- 1.  From  my  review  of 

Cohen’s-tax-retums^-I  know-he  lists-his-primary-residenee  as  Subjeet^Premises-1— Additionally-,- 

from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Premises-1  as  his  home.  For  example,  on  or  about  September  28,  2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  loiow  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  18(b),  18(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra\\9{c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  T|  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 
I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 

ownership-of-the-taxi  medallion-LLCs^the-revenue-that-those-medallions-generate,--and-the 

transaction  with  Sterling  in  2014  to  re-fmance  the  medallion  loans  that  were  then  with  Capital  One 
Bank. 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Sterling 
addressed  documents  relating  to  the  ^^^^^^|transaction  and  Cohen’s  attempts  to  modify  the 
terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance.  Sterling  addressed  the 
transaction  term  sheet,  see  supra  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  ^ 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  j^^^^Hlransaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 
records — such  as  records  relating  to  a  payment  from  Cohen  to^^^^^^|-were  concealed  from 
Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  loiowledge 
of  the  documents. 

c.  From  my  review  of  records  maintained  by  First  Republic,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  18(b),  18(e).  Accordingly,  it  is  likely  that  Subject 
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Premises-1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 

existence  of  funds  in  accounts. 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Stanley,  City  National  Bank,  Signature  Bank,  and  Bethpage  Credit  Union,  I  loiow  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relatmg  to 
these  accounts,  including,  among  other  things,  bank  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen  s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  were 
not  disclosed  to  Sterling  and  are  not  presently  known  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  supra  16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”^®  The  value  of  these  investments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 

Based  on  my  participation  in  an  interview  with  Sterling  Employee-3,  I  have  learned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  in  overseas  entities”  on  his 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  future  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Premises-1  as  the  mailing  address  for  bank  records,  there  is  probable 
cause  to  believe  that  account  statements  for  unknown  bank  accounts  or  assets  concealed  from 

Sterling  are  likely  to  be  found  in  Subject  Premises-1 . 

f  Based  on  my  review  of  records  maintained,  by  AT&T  and  produced  pursuant  to  the 

Cohen  Email  Warrants,  I  know  that  the  address  Cohen  provided  to  AT&T  for  Essential  Consultants 

lslhe“'adS^s7or^ubje"cn&lsds4. 

believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 
Consultants  or  money  that  Cohen  received,  through  Essential  Consultants,  from  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  arrangements  that  Cohen,  through  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  GetzeP  s  accounting  firm,  and  emails 

produced  pui-suant  to  the  Cohen  Email  Warrants,  I  have  learned  that  Getzel’s  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  returns.  See  supra  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  Getzel’s  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly, 

Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Premises-1 . 

h.  Based  on  my  review  of  bank  records  and  publicly-available  documents,  I  laiow  that 

Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  Imow  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises-1  is  likely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 
pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants  and 
iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
MacBook-Proto^access-his-iCloud-accountT-Basedmn  my  review-of  location  reeords-provided-by- 
Apple  pursuant  to  the  iCloud  Warrant,  I  know  that  electronic  devices  linked  to  Cohen’s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contahis  electronic  devices,  including  certain  Apple  products,  that  for  reasons 
discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 
understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
from  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  furnishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  —  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.^^ 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 
and^my^review  ofthe  press_release-on-Squire-Patton-Boggs!s-website,-Lknow_thaCCohemhas_am 
office  at  Subject  Premises-2.  See  supra  Hlf  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement  with  the  law  firm,  he  has  “dedicated  and  segregated  office  space”  in  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  Tf  19(e).  Additionally,  I  know  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs’s] 
computer  network  system.”  I  know  from  my  participation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  Icnow  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signature  block 

As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  taken  some  evidence  from 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  nature  of  Cohen’s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  loiow  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  loiow  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14,  2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  F ebruary  2018. 

_ 49.  There  is  also  probable  cause  to  believe  that  Subject Premises-2is_likely_to_c_ontain _ 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
'  emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  T|  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  See  supra  TITj  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangernent.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  loiow  that  Cohen 
continues  to  enter  into  consulting  arrangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  arrangements  that  Cohen  has  with 

other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  firm,  and  emails 

produced  pu7suanttotlie^el^ErnaTrmrfant^s^IRs'm^^^ 

Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 
See  supra  20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 
and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintains 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appears  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electi-onic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 

,  Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business— such  as  contacts  with  clients 
and  records  of  payments— at  the  business’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 

will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular. 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 

2017,  as  C^en^aslS^wng^substSitianncome  from  cdMmfmgwOTk= 

to  Sterling— Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 
Sterling.  Indeed,  based  on  my  trainhig  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 

Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10,2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5:39  on  that  date.^^  Based  on  my  review  of  toll  records,  I  know  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later  - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 

32  The  entry  in  the  banlc’s  log  book  does  not  specify  whether  this  is  A,M.  or  P.M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  February  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  around 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’s 
client  -  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 
^Campaign  Finance^Offenses,  such  as  documehts^feldvdhf Td  Keith 

Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 

to  leave  in  his  apartment  where  construction  workers  would  be  present. 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 

cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 

instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following: 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  m  the 
payment  to  Clifford  were  being  published.  See  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 


33  As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordmgly,  I 
dott  believe  thai  it  wUd  fit  a  latge  volume  of  hard  copy  doeumen^;  l>o»ever  a  etna  1  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  30,2018,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra 

1 6(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoingmegotiations-with'Sterling-with  him  to  Subjeet  Premises-4,  in  order  to  referenee  and- 
consult  them  in  connection  with  these  negotiations. 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini, 
and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linlced  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  -  Cohens’  permanent  residence  -  to  place 
telephone  calls  and  backup  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordingly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
electronic  devices,  including  Subject  Device- 1,  Subject  Device-2,  and/or  certain  Apple  products, 
that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regarding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unlcnown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrant  sought  herein  are  executed.  If  Cohen  is  within  Subject  Premises-4  at  that  moment.  Subject 
Device-1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 
If^enTsnoTTOthiii^bjddrPremis^es-A'arffiafmdniM^ 

wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device- 1  and  Subject  Device-2 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seeks  separate  authority  to  seize  Subject  Device- 1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 
warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  likely  to  contain 
evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device- 1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contain 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 
Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  beemobtainedvia'^subpocnas-and-searchwarrantsrTknow-firom  my  trainingand-experience 
that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 
those  emails  on  their  hard  drives.  I  also  Imow  that  individuals  often  have  multiple  email  accounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  know  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subj  ect  Premises- 1 ,  Subj  ect  Premise-2  and  Subj  ect  Premises-4  likely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  electronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  know  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  trainmg  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  their  financial  transactions  to 
theirdevices.'Accm^glyrt^^^^^^  caus^t^behd^^l^arCdhen’T^ieWowc-^^^^ 

contain  evidence  of  banking  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 
did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  laiow  that  Cohen 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 

messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  m 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  “chats  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 

even  years  after  it  occurred.  This  is  typically  true  because; 

•  Elech-onic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and.  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

•  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted’  on  a  home, 

_ computer,The,dataxmtainedinthefeioesnotactuallyd|sappear,b^^ 

on  the  hard  drive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  camot  be 
stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  &e  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,  _  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 
pages.  Thus,  the  ability  to  retrieve  from  a  hard  drive  or  other  electronic  storage  me  la 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user  s 
operating  system,  storage  capacity,  and  computer  habits. 

•  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  drives,  Hash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fiuits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Section  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 

the  proposed  warrants,  including  the  following; 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 

Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
correspondence,  banlc  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  tc^^^^|^nd/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 

with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 

indicate  thenatoeandpurpose^ofpaymentrniadet^orta^ 

of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 

entities,  including  tax  returns,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  fmancial  transactions  between 

Cohen  and^^^^^H  and  any  payments 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 

and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 

agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 

Tru^Campaign  about  and  other  YoteiTtiarsources  ofTaegative-- 

publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

n.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

0.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 

conhibution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 

representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

i 

financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  puntosc  or  nature  of  any 

financial  transactions  involving  that  financial  institution, 

r .  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subj  ect  Offenses  under  investigation. 

III.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  41(e)(2)(B)  provides  that  a  warrant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  for  a  number 
of reasons: 


•  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

•  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intentional 

or  liestruc^ti(M;“computertevice's  arenfdeally"“examined^ima'con^^ 

environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  make  a  forensic  copy  of  the  storage  media  that  can  be 
subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data. 

•  Third,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  from  a  computer 
device,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  time  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein.  Squire  Patton  Boggs  is  a  functioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  will  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 

“pe^si^^eTtav^v^dinSeinvestigationJncihdlSgattorne-^^ 

in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 
appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate  and  apart  from 
the  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  from  my  training  and  experience,  as  well  as  from  information  found  m 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingerprint”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  know  thatthe  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  infrared  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  fmger(s)  to  the  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
^IpKahumefic  passcode  or  password,  as  well  as  a  more  secure  way  to  protectthe  device  s  contents. 

63.  In  some  circumstances,  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include;  (1)  when  the  device  has  just  been  turned  on  or  restarted,  (2)  when  more 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  known 
to  law  enforcement.  Thus,  it  will  likely  be  necessary  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  front  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Faee  ID  by  holding  the  device  in  front  of  the 
user’s  faee,  is  necessary  because  the  government  may  not  otherwise  be  able  to  aceess  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingerprints  are  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  loiow  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 

Tnfii7eventfiiat  law  enfo^enliTunaW^^^^^ 

within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 

entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 

materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  talce  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 

available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 

the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 

69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  die  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 

7onttol^irfr^lteESrco^inedteffiTmm6rtSffioTra^ 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 
to  determine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 


techniques  may  include,  for  example: 

.  surveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
looking  ta  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 

believed  to  contain  pertinent  files); 

.  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  determine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance), 

.  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

.  nerforming  electronic  keyword  searches  through  all  electronic  storage  areas  to 
Ltermine  the  existence  and  location  of  data  potentially  related  to  the  subject  matter 

the  investigation^"^;  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


34Kevword  searches  alone  are  typically  inadequate  to  detect  all  relevant  data.  For  one  thing, 
contain  the  keywords  being  searched. 
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71.  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

the^OOTermn^  the  elStronic  "devices  are  no  Icrnfernecessary- 

to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41  (c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (it)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 

Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court'orders7otherwisei 


FBI 


Sworn  to  before  me  on 
8th  day  of  April,  2018 


HON.  HENRY  B.  PITMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 

I.  Premises  to  be  Searched— Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-1”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

ApartmentMocated  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
1 0022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the^^^Jfloor  of  the  building. 

IL  Items  to  Be  Seized 


A  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fruits,  and  instrume^^^^^^ 
of  violations  of  18U.S.C.  §§  371  (conspiracy,  it  Pert^ms  to  the  other  Subject 
/false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  baud),  an  _ 

f“and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 

contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  tc^^^^Hand/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 

indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 

of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consu 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 

that  indicate  the  nature  and  purpose  of  payments  made  to  or  Michael  D.  Cohen  & 
or  evidence  of  the  purpose  of  accounts  opened  mthe  name  of  Michael  D.  Cohen  &  Associates. 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities!  including  tax  retons,  personal  financial  statements,  and  bank  records,  from  January  , 
2013  to  the  present. 

.  Evidence  relating  to  agreements,  loans,  and/or  financial  trans^tmn^eto^ 
Cohen  controlled  by  the 
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L  and  any  payments  by| 


to  Cohen,  trom  January 


1,  2012  to  the  present. 


h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tramp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDouga  ,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

i  of  communications  between  Michael  Cohen  and  American  Media  Inc., 


David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013 

present. 

p.  Communications,  records,  documents,  and  other  files 

representations  to  a  financial  institution  related  to  the  intended  pui-pose  of  an  account  or  loan  at 
thL  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  ^ 

financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subj  ect  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  ftom  Subject  Premises-1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBoo  r  , 
any  ot;  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48t1  Filed  07/18/19  Page  186  of  269 


belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-1  also  include; 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 

eoneeming-th^Gonfiguration  of-the-seized  or  copiecLcomputerMevicesjiotQrage  media^ - 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
persoimel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  marldngs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  malce  reasonable  efforts  to  search  onty  for  ffles 
documents  or  other  electronically  stored  information  within  the  categories  identified  m  Sec  mn 
II A  and  II B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  “n  uc 
a  relw  of  all  the  ESI  from  seized  devices  or  storage  media  .f  rteeessary  to  evaluate  ,ts 

contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  estabf  shed  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
anv  attornev-chent  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  includ 
us^  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  m  or  er  o  a  e 

potential  privileges. 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  188  of  269 


ATTACHMENT  B 


I,  Premises  to  be  Searched — Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  the  23rd  floor  of  the 
building  at  30  Rockefeller  Plaza,  New  York,  New  York  101 12,  inside  of  the  offices  of  the  law  irm 
win  Boggs.  The  building  located  at  30  Rockefeller  Plaza  ts  a  66-floor  office  butldmg 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 


n.  Items  to  Be  Seized 


A. 


Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 


The  items  to  be  seized  flom  Subject  Premises-2  are 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  344 

tfflke  banlc  entries)  1014  (false  statements  to  a  financial  institution),  1343  (wire  traud),  an 

fil)  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  eampargn 

contributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Mehose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts 
Abilities,  to  others,  including  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 

indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 

of  any  work  done  by  Cohen  or  any  other  individuals  m  connection  with  Essential  Consul 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  ^  Michael  D.  Cohen  &  Associa  , 
or  evidence  of  the  purpose  of  accounts  opened  m  the  name  of  Michael  D.  Cohen  &  Associa  . 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
"utMe^neMing  tax  retur;s,  personal  financial  statements,  and  banlc  records,  from  January  1, 

2013  to  the  present. 


Cohen  and  I 


m  Evidence  relating  to  agreements,  loans,  and/or  financial  tr^^ffim^et^ 


I  and/or  entities  controlled  by| 
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and  any  payments  by  i 


I  to  Cohen,  from  January 


1,  2012  to  the  present. 


h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

_ _ i  _ Evidence  of  communications  between  Michael  Cohen  and  American  Media  Inc., 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  nega  ive 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  anffor  other 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  firom  January  1,  2013  to  the 

present. 

p  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  ^ 

financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subj  ect  Offenses  under  investigation. 


B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II. A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktc^  ^ 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belongmg  to  Michael  Cohen 
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or  in  his  possession,  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants 
to  Ueu  oriTzhg  such  computer  devices  or  storage  media,  this  warrant  also  authonzes  the 

copying  of  such  devices  or  media  for  latei  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include. 

1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys_,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  mforma  . 

2  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  softwam  manuals  or  other  mformation, 

^ond^ngthTcWfiglifflibliofthAs-^^^^^^^^  - 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  creation 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  stafh  agency 
nSr^l  assi  ng  the  government  in  this  investigation,  and  outside  tectacal  experts  under 

rover-tu^ 

to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example; 

.  surveying  various  file  “dhectories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  relate 
to  the  subject  matter  of  the  investigation,  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  information  refecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents  or  other  electi-onically  stored  information  within  the  categories  identified  m  Sections 
II A  and  II B  of  this  Attachment.  However,  law  enforcement  personne  are  authorized  to  “ndu 
a  ctmpte  relw  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be 
to  established  procedures  designed  to  collect  evidence  m  a  maimer  reasonably  ° 

^rrmey-chent  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team.”  separate  and  apart  from  the  investigative  team,  in  order  to  addr 

potential  privileges. 
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ATTACHMENT  C 

I.  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein; 

A  safe  deposit  box  located  inside  thi^D  Bank  braneh  location  at  500  Park  Avenue,  New 
York,  itw  York  10019,  marked  as  box  #  |  The  safe  deposit  box  is  in  the  name  of  Michael 

Cohen  and  Laura  Cohen. 


n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-3  are  “I''’ 

of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to 

('fp.ko  hank  entries')  1014  (false  statements  to  a  financial  institution),  1343  (wire  trauUj, 
bsIS”  and  52  U  S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows. 

1,  Evidence  relating  to  Miehael  Cohen's  net  "O'*'  ““k  ”3 

equivalents,  assets,  monthly  and  annual  ineome,  and  income  sources,  from  January  1, 

present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  “cDougaf  or  toeir 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documen  s, 
and  any  communications  related  to  such  agreements. 

3  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDouga , 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4  Evidence  of  communications  between  Michael  Cohen  and  rtoerican  J-to'' 

David  Pecker,  Id/or  Dylan  Howard  about  Donald  Trump,  toe  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen's  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 

Trump  Campaign  tout  the  Acc...  Hollywood  tape  and  other  potential  sources  of  negafive 
publicity  involving  Trump’s  relationship  m  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  eleetronic  storage  device  for  the  items  set 


forth  in  Section  II(A)(l)-(8),  above. 

C.  Review  of  ESI 


information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  includmg,  for  example: 

.  surveving  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  ft  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  openmg  a  drawer 

believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
Leurrenefs  of  language  contained  in  such  storage  areas  exist  that  are  mtimately  re 
to  the  subject  matter  of  the  investigation;  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  infm-mation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Taw  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  mes, 

a  cor;!  “clt  o"eSI  horn  seiz;d  devices  if  necessai-y  to  cvaluute  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  mclude 
use  of  a  desfgnated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  addres 

potential  privileges. 
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ATTACHMENT  D 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
elecb-onic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  mside  the  Loews  Regency  Hotel  at  540  Park  York  New 

York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

II.  Items  to  Be  Seized _ _ _ _ _ _ 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  ins^ntahties 

of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  i^pertams  ^  I344 

Take  hank  entries)  1014  (false  statements  to  a  financial  mstitution),  1343  (wire  baud),  an  _ 

faur^d  52  U  S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (.llegal  eampatgn 

contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  taxi  medallions,  and  any  associated  deb 

MMes,  to  others,  including  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  docurnents  that 

indicate  the  nature  and  purpose  of  payments  made  to  or  ftom  Essential 

of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultan  . 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 

that  indicate  the  nature  and  purpose  of  payments  made  to  or  D.  Cohen  &  s, 

or  evidence  of  the  purpose  of  accounts  opened  m  the  name  of  Michael  D.  Cohen  &  Associa  . 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  atl^ual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


Cohen  and 


„  Emuenoe  relstinu  to  agreements,  loans,  and/or  financial  tiansactta^e^ 

entities  controlled 
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,  and  any  payments  by| 


Ito  Cohen,  from  January 


1,  2012  to  the  present. 

h  Evidence  relating  to  payntente  to  Stephanie  Clifford.  Karen  McDoug^,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documen  s. 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDoug  , 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

_  i  of  comnumications  between  Michael  Cohen  and  American  Me^a  Inc 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Steph 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negativ 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Geteel  and/or  other  ac^t^ 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013 

present. 

D  Communications,  records,  documents,  and  other  files  reflectmg  false 
renresentatfons  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
ZtTnan^  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

Lndal  iustitution;  the  source  of  fuuds  flowing  into  an  account;  or  fte  °  ^ 

financial  transactions  involving  that  financial  institution,  fi-om  January  1.  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 

storage  media  that  may  contain  any  electronically 

forth  in  Section  II A  of  this  Attachment  above,  includmg,  but  not  limited  to,  a  MacBooic  , 
"“dX  1  laptop  computers,  any  Apple  iPhone  or  ofiter  cellphone  or  smarflthone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  d  si 
drives  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
m  storageT^  thi^  warrL  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 


The  items  to  be  seized  from  Subject  Premises-4  also  include; 


1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copie 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  enctyption 
deviLs,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  mformati  . 

2  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  irforma  ion 

coii^riiinglidTonfigmatibnoflh^izeftmrcn  -  ' 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and^r  creation  M 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  f 

nersonnel  assisting  the  government  in  this  investigation,  and  outside  teclmical  experts  un 
rovrmenTcTntrol)  are  futhorized  to  review  the  ESI  contained  therein  for  information  responsive 

to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 

.  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  atthe  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  di'awer 
believed  to  contain  pertinent  files) ; 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  ai-e  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  ’ 

documents  or  other  electronically  stored  information  within  the  categories  identified  m  Secti 
TT  A  and  II B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  cond 
a  c^mptte  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 

contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pmsuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  prote 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  proceduies  shall  me 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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ATTACHMENT  E 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (  Subject  Device  1  )  is 
described  as  follows; 

An  Apple  iPhone  sei-viced  by  AT&T  with  the  telephone  numberj^^^^H 
Durinu  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 

to  gain  access  to  the  contents  of  any  such  device  as  authoiTzed  by  this  warran  . 

II.  Review  of  ESI  on  the  Subject  Device 

T  aw  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  apnts, 

*view  SetrcorlTit 

•  1  +*  Cl  rv-p  1  8  TT  9  r  88  71  fconsDiracv  as  it  pertains  to  the  other  Subject  Ottens  j,  v 

violations  or  lo  U.o.v^-  §§  v  P  *  i  •  4.*j^  fraiih^  and  134-4-  {bank 

SltSt  U^S.ct§  “aXlXA)  “lOP/dXDCAja)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows; 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxr 

medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associa.d  whh  him  to  tra^^^  in^i  — ^ 
liabilities,  to  others,  mcludmg  to^^^^^^jana/or  emmcs 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  ^ 

Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  dociraients 
Cohen  &  Associates. 
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f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  throng 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 

2013  to  the  present. 

»  Rvidence  relating  to  agreements,  loans,  and/or  fmancial  temotion^e^i 
1  and/or  controlled 

payments  by  tl|^^:o  Cohen,  from  January 


1,  2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  MeDongal,  or  them 

agentstor--legaLtepresentative5.  mchidingjmy_npndiscjosure  agreements  and  related  doe^^^ 

and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tnmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  ICaren  McDougal. 

i .  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  ep  a 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with,  the  Trump  Cumpuign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  liie  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits . 

0.  Communications  with  othets,  including  Jeffley  Octzcl  and/or  other  ■tocot.ntante 
relating  to  Cohen's  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

n.  Communications,  records,  documents,  and  other  ffles  reflecting  Mse 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  “  “ 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

flancial  institution;  the  source  of  funds  flowing  into  an  account;  or  fte 

financial  transactions  involving  that  financial  institution,  from  January  1. 2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-1  is  no  longer  necessary  to  retrievejid 
nreserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-1,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
an^  “yXnt  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  melude 
nsl  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  m  order  to  address 

potential  privileges. 
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ATTACHMENT  F 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows; 

Aji  Apple  iPhone  serviced  by  AT&T  with  die  telephone  numbeij 
During  the  execution  of  this  search  warrant,  law  enforcement  ™  l!f  Subie'cj 

to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  thia  wairan  . 

II.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
violations  of  18  U.S.C.  §§  371  (eonsplracy  as  n  '  and  1344  ftank 

hank  entries')  1014  (false  statements  to  a  financial  institution),  1343  (  h  + -k  tmnQt 

tadj.  Id  52  U.S.C.  §§  301 16(a)(1)(A)  tmd  30109(d)(l)(A)(l)  (Illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Mehose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 ,  20 1 3  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Co^n  anihor 

entities  associated  with  him  toha^lgltin^im^^ 

liabilities,  to  others,  includmg  to^^^^^^Hnu/or  euuucb 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  ^documents  or 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records,  from  January  , 
2013  to  the  present. 

!?.  Evidence  relating  to  agreements,  loans,  and/or  financial 
Cohen  entitiescontrolledb3^^^^^^^^^^| 

any  payments  by  Cohen,  from  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

-agents- or4egal-representativns,,inchiding,Miy_nQndisclosme^agreenignts  and  relgted^documeiits^ 

and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/  or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  fi:om  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  ot  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-2,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  mclude 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 

potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

502  Park  Avenue,  Apartment  New  York,  New  York 
10022,  and  any  closed  containers/items  contained 
therein.  See  Attachment  A 


SEARCH  AND  SEIZURE  WARRANT 


2969 


To;  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  seai’ch 
of  the  following  person  or  propei-ty  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  pr^^^i  to  be  searched  and  give  its  location): 

502  Park  Avenue,  Apartment  New  York,  New  York  1 0022,  and  any  closed  containers/items  contained  therein. 
See  Attachment  A 

The  person  or  property  to  be  seai'ched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized): 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  seffloh  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrarrt  on  or  before  /  ,L/  .-.  ^ /  ^ 

1  (not  to  exceed  14  days) 

in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  1  find  reasonable  cause  hi’-s  been 

established.  !  i  ' 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  r-eceipt,  for  the  property 
taken  to  the  person  frcm  whom,  or  from  whose  premises,  the  property  was  takeri,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  tiro  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  retrun  this  warrant  and  inventory  to  the  Clerk  of  the  Corrrt. 

_ Upon  its  retm-n,  this  warrant  and  inventory  should  he  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  thp  pdrsbh  who,  or  whose  property,  will  be 
SQatlchad  ox  sdasd  (check  the  appropriate  box)  Ofor  _ Asfs  (not  to  exceed 3(1)1  ' 


Date  and  time  issued; 


If' 


□until,  the  facts  justifying,  the  later' specific  date  bf 

-/  '’2 ' , A  ^  A 


City  and  state:  New  York,  NY _ 


Judge ‘s  signaipt%  : 

•  Non.  Henry  B.  Pitman , Magistrate  Judge 
'  ,  '  Printed  nams  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  wairant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventoiy  made  in  the  presence  of ; 

Inventoiy  of  the  property  taken  and  name  of  any  person(s)  seized; 


Certification 


I  declai'e  under  penalty  of  perjury  that  this  inventoiy  is  correct  and  was  returned  along  with  the  original  wairant 
to  the  Court. 


Date:  _  _ 

Executing  officer ’s  signature 


Printed  name  and  title 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-l”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therehi: 

Apartment^^Blocated  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-ftoor  brick  residential  building.  Subject 
Premises-l  is  located  on  the  the  braiding. 

II.  Items  to  Be  Seized 


- At  -EvidencerFruits^and  Instrumentalities  of  the  Subject  Offenses - - - 

The  items  to  be  seized  fi'om  Subject  Premises-l  are  evidence,  fiuits,  and  instrumentahties 
of  violations  of  18  U.S.C.  §§  371  (consphacy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entiles),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fi’aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contiibutions)  (the  “Subject  Offenses”),  desciibed  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Mekose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


land/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agi-eement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  coimection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  fi'om  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accormts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  atmual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  retrans,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  tr-ansactions  between 

Cohen  and^^^^^^^^^^^^^^^^^^^Hrnd/or  controlled  by 
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to  Cohen,  fi-om  Januaiy 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosm'e  agreements  and  related  documents, 
and  any  communications  related  to  such  agi'cements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karun  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

Ic.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  commumcations  with  Donald  Trump  and/or  agents  or  associates  of  tire 
Trump  Campaign  about  the  Access  Holl}!V,rood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbm’sement  or  other  promises  made  to  Cohen  for 
payment  to  Chfford  or  others  in  cormection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits 

o.  Communications  with  others,  including  Jeffi-ey  Getzel  and/or  other  accormtants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


1,  2012  to  the  present 


I  and  any  payments  byl 


p.  Commrrrricatiorrs,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  puipose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  fi'om  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  fi’om  Subject  Premises-1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  uiformation  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  deslctop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 


2017.08.02 


3 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  209  of  269 


belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  &om  Subject  Premises-1  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
conceriung  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concermng  the  identities  or  locations  of  those  persons  with  access  to, 
contool  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizru’e  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorireys  for  the  governmerrt,  attorirey  support  staff,  agency 
persormel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under- 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  persormel  may  use  various  techniques  to  locate 
information  responsive  to  the  wan-ant,  including,  for  example: 

e  sur-veying  various  file  “dh-ectories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  marldngs  it  contains  and  opening  a  drawer- 
believed  to  contain  pertinent  files); 

»  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

®  scaiming  storage  ar-eas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occun-ences  of  language  contained  in  such  storage  areas  exist  that  ai'e  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  Whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  persormel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  aU  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedru’es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shah  include 
use  of  a  designated  “filter  team,”  separate  and  aparf  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

502  Park  Avenue,  ApartmentJU  New  York,  New  York  ^ 

10022,  and  any  closed  containers/items  contained 

therein.  See  Attachment  A  / 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

502  Park  Avenue,  Apartment  ^iNew  York,  New  York  10022,  and  any  dosed  containers/items  contained  therein. 
See  Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  he  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 


sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJInitials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  Hsted  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (mt  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 

Date  and  time  issued:  “J  ^  i  “Vvl  _ 

®  *  I  Judge ’s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  212  of  269 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made 

in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer ’s  signature 


Printed  name  and  title 
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ATTACHMENT  A 


L  Premises  to  be  Searched — Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-l”)  are  described  as  follows,  and  include 
elecbonic  devices,  and  all  locked  and  closed  containers  found  therein: 

Apartmenl^^Hlocated  inside  the  brdlding  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  theHH^|of  the  building. 


II.  Items  to  Be  Seized 

_ A._Evidence,  Fruits,  andTnstrumeiitalities.  of  the^SuhjectjQffenses 


The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspbacy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  tfe  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  offers,  including  to 


land/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  tfat  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  witf  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  Irom  January  1, 
2013  to  the  present. 

Cohen  and 


to  agreements,  loans,  and/or  financial  transactions  between 
^and/or  entities  controlled  by 
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land  any  payments  by  I 


lo  Cohen,  from  January 


1,  2012  to  the  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
^CltffoTdTandyoT  KaremM'cDdugal: 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  coimection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subj  ect  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises- 1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II. A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises- 1  also  include: 

1 .  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  persormel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
11.  A  and  Il.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  ftom  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  ftom  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identijy  the  person  by  name  and  address)  )  Case 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  ? 

Floor,  New  York,  New  York  10112,  and  any  closed  / 
containers/items  contained  therein.  See  Attachment  B  / 

SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  govermnent  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  York,  New  York  10112,  and  any  closed 
containers/items  contained  therein.  See  Attachment  B 

Tlie  person  or  property  to  he  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  B 


18MAG  2969 

A  \ 


I  find  that  the  afFrdavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  pejzd'the,  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  wari’ant  on  or  before  A  ^  ^  \  ‘  ,  _ 

’  ;  (hot  to  exceed  14  days)  . 

Sf  in  the  daytime  6:00  a.rn.  to  1 0  p.m.  □  at  any  time  in  the  day  or  night  >1  fimk  reasonable  cause  has  been 

established.  ■  i  .  A 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  wartaht  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  properly  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Coirrt. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  fried  rmder  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  frnd  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  rrotice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 


Date  and  time  issued:  V  “"T  S 

"77  ry 

City  and  state:  New  York.  NY _ 


7  A 


-A 


,  Judge  is  signature 


Hoh.ij-ienrv  B.  Pitman..  U.S.  Magistrate  Judge 

’  '  ,  '  .  Printed  name  and  title 
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Return 

Case  No.; 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  propeity  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjuiy  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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ATTACHMENTS 

I,  Premises  to  be  Searched^ — Subject  Premises-2 

The  preiuises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  the  23rd  floor  of  the 
building  at  3  0  Rockefeller  Plaza,  New  York,  New  York  10112,  inside  of  the  offices  of  the  law  fnin 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Plaza  is  a  66-floor  office  building 
that  spans  the  enthe  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 

IL  Items  to  Be  Seized  


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-2  are  evidence,  fi'uits,  and  insti'umentalities 
of  violations  of  18  U.S.C.  §§  371  (consphacy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
conhibutions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  finm  January  1, 2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  bim  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tc 


luid/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nahrre  and  prrrpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  mcluding  tax  retmns,  personal  financial  statements,  and  hairlc  records,  finm  January  1, 
2013  to  the  present. 


^^^Evidnnc^relatin^t^aure^^ts,  loans,  and/or  financial  transactions  between 
Cohen  and  and/or  by| 
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1, 2012  to  the  present. 


ind  any  payments  by 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosme  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


Ic.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Tinmp  and/ or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Holly\\’ood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  ran  up  to  the  election. 

m.  Evidence  relating  to  any  reimbm'sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  comiection  with  the  election, 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  accoimt  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  natoe  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present, 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  mcluding,  but  not  limited  to,  any  deslctop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 
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or  in  his  possession,  portable  hai'd  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants. 
In  lieu  of  seizing  any  such  eomputer  deviees  or  storage  media,  this  warrant  also  authorizes  the 
eopying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 

1.  Any  items  or  reeords  needed  to  aeeess  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physieal  keys,  eneryption 
devices,  or  records  of  login  credentials,  passwords,  private  eneryption  keys,  or  similar  infoimation. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  ineluding  any  hardware  or  softwai'e  manuals  or  other  information 
eoncerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  aeeess  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizm'e  of  any  computer  devices  and  storage  media  and/or  the  ereation  of 
forensic  image  eopies,  law  enforcement  persoimel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  rmder 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  persormel  may  use  various  teclmiques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  smveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opeiring  a  drawer- 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

9  performing  key  word  sear'ches  through  all  elechonic  storage  areas  to  determine  whether 
occmrences  of  language  contained  hr  such  storage  areas  exist  that  ai’e  intimately  related 
to  the  subj  ect  matter  of  the  investigation;  and 

®  reviewing  metadata,  system  infoimation,  configui-ation  files,  registry  data,  and  any 
other  infoimation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
11.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  persotmel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pm'suant 
to  established  procedrrres  designed  to  collect  evidence  in  a  maimer  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedmns  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apaif  tf  om  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd 
Floor,  New  York,  New  York  10112,  and  any  closed 
containers/items  contained  therein.  See  Attachment  B 


Case  No. 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 


(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)', 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  York,  New  York  10112,  and  any  closed 
containers/items  contained  therein.  See  Attachment  B 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  B 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJInitials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed 30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued: 

®  f  J-iirJcro  t^irrvmitJYo 


Judge ’s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  224  of  269 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 

Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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ATTACHMENT  B 

I.  Premises  to  be  Searched — Subject  Premises-2 

The  premises  to  be  searehed  (“Subjeet  Premises-2”)  are  deseribed  as  follows,  and  inelude 
eleebonie  deviees,  and  all  looked  and  elosed  eontainers  found  therein; 

An  offiee  belonging  to  or  assigned  to  Miehael  Cohen  loeated  on  the  23rd  floor  of  the 
building  at  3  0  Roekefeller  Plaza,  New  Y  ork.  New  Y  ork  10112,  inside  of  the  offiees  of  the  law  firm 
Squire  Patton  Boggs.  The  building  loeated  at  30  Roekefeller  Plaza  is  a  66-floor  offiee  building 
that  spans  the  entire  bloek  between  Sixth  Avenue  and  Roekefeller  Plaza. 

II.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subjeet  Premises-2  are  evidenee,  fruits,  and  mstrumentalities 
of  violations  of  18  U.S.C.  §§  371  (eonsphaey  as  it  pertains  to  the  other  Subjeet  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  finaneial  institution),  1343  (whe  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  eampaign 
eontributions)  (the  “Subjeet  Offenses”)  deseribed  as  follows: 

a.  Evidenee  relating  to  Sterling  National  Bank,  Mebose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidenee  relating  to  a  plan,  proposal,  or  agreement  for  Miehael  Cohen  and/or 
entities  assoeiated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  assoeiated  debts  or 


liabilities,  to  others,  ineluding  to 


lind/or  entities  assoeiated  with  him. 


e.  Evidenee  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidenee  relating  to  Essential  Consultants,  EEC,  ineluding  any  doeuments  that 
indieate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  eonneetion  with  Essential  Consultants. 

e.  Evidenee  of  ineome  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 


Cohen  and 


g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

and/or 
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and  any  payments  by  Cohen,  from  January 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
'Clifford,  and/oFKaren  McDougal” 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  Avith  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  accoimt  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 
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or  in  his  possession,  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants. 
In  lieu  of  seizing  any  sueh  eomputer  deviees  or  storage  media,  this  warrant  also  authorizes  the 
eopying  of  such  deviees  or  media  for  later  review. 

The  items  to  be  seized  from  Subjeet  Premises-2  also  inelude: 

1 .  Any  items  or  reeords  needed  to  aeeess  the  data  stored  on  any  seized  or  eopied 
eomputer  deviees  or  storage  media,  ineluding  but  not  limited  to  any  physieal  keys,  eneryption 
deviees,  or  records  of  login  credentials,  passwords,  private  eneryption  keys,  or  similar  information. 

2.  Any  items  or  reeords  that  may  faeilitate  a  forensie  examination  of  the  eomputer 
deviees  or  storage  media,  ineluding  any  hardware  or  software  manuals  or  other  information 
eoneeming  the  eonfiguration  of  the  seized  or  copied  eomputer  deviees  or  storage  media. 

3 .  Any  evidenee  eoneeming  the  identities  or  loeations  of  those  persons  with  aeeess  to, 
eontrol  over,  or  ownership  of  the  seized  or  eopied  eomputer  deviees  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  eomputer  deviees  and  storage  media  and/or  the  ereation  of 
forensie  image  eopies,  law  enforeement  personnel  (whieh  may  inelude,  in  addition  to  law 
enforeement  offieers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  ageney 
personnel  assisting  the  government  in  this  investigation,  and  outside  teehnieal  experts  under 
government  eontrol)  are  authorized  to  review  the  ESI  eontained  therein  for  information  responsive 
to  the  warrant. 

In  eondueting  this  review,  law  enforeement  personnel  may  use  various  teehniques  to  loeate 
information  responsive  to  the  warrant,  ineluding,  for  example: 

•  surveying  various  file  “direetories”  and  the  individual  files  they  eontain  (analogous  to 
looking  at  the  outside  of  a  file  eabinet  for  the  markings  it  eontains  and  opening  a  drawer 
believed  to  eontain  pertinent  files); 

•  opening  or  eursorily  reading  the  first  few  “pages”  of  sueh  files  in  order  to  determine 
their  preeise  eontents; 

•  seanning  storage  areas  to  diseover  and  possibly  reeoyer  reeently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searehes  through  all  eleetronie  storage  areas  to  determine  whether 
oceurrenees  of  language  contained  in  sueh  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  eonfiguration  files,  registry  data,  and  any 
other  information  refieefing  how,  when,  and  by  whom  the  eomputer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
11.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  idenlij}’  the  person  by  name  and  address) 

Saf0  Deposit  Box^^J.ocated  at  the  TD  Bank  Branch  at 
500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/items  contained  therein.  See  Att.  C 


Case  No. 


SEARCH  AND  SE: 


18MAG  2969 

IZURjrWARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  propeity  located  in  the  _ Southern  District  of  _ New  York 


(idenlij}!  the  person  ordesnrihe  the  property  to  be  searched  and  give  its  location)'. 

Safe  Deposit  Bo>^^|_ocated  at  the  TD  Bank  Branch  at  500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  contalners/iiems  contained  therein, See  Attachment  C 

The  person  or  property  to  he  searched,  described  above,  is  believed  to  conceal  (identifl!  the  person  or  describe  the 
property  to  be  seized): 

See  Attachment  C 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


t/- 


propeify. 

YOU  ARE  COMMANDED  to  execute  this  wairant  on  or  before  _ _ _ _ 

•  (notio&sceedlddciys) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  nigfifasT  firid  rcaSonabld  cause  has  been 

established. 

Unless  delayed  notice  is  autliorized  below,  you  must  give  a  copy  of  the  waifant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  propeify  was  taken,  oi'  leave  the  copy  and  receipt  at  the 
place  where  the  propeify  was  taken. 

The  officer  executing  this  wairant,  or  an  officer  present  dming  the  execution  of  tire  warrant,  must  prepare  an 
inventory  as  requhed  by  law  and  promptly  return  this  warrant  and  inventoiy  to  the  Gleik  of  the  Gouit. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Comt. _ 

USAdJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  propeity,  will  be 
searched  or  seized  (check  the  appropriate  box)  Dfor  _ days  (not  to  exceed  30), 

□until,  die  facts  justi:fying,  the  later  specific  date  of  _  _  _ ^  __ , _ . 


Date  and  time  issued: 


JlztfllZjL 


'lifi'irfii 


City  and  state:  New  York.  NY 


ft^udge  's  sigriahire 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 
Printed  name  and  title  <  :■  ' 
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Return 

Case  No.: 

/ 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  peijury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date: _ _ _ _ 

Executing  officer’s  signature 


Fiintedname  and  title 
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ATTACHMENT  C 

L  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  the  TD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box^HHxhe  safe  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Lamu  Cohen. 

II.  Items  to  Be  Seized 


The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fruits,  and  instrumentahties 
of  violations  of  18  U.S.C.  §§  371  (consphacy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  soiu’ces,  fi’om  January  1, 2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephairie  Clifford,  Karen  McDougal,  or  then* 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
pa3mients  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howar’d  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6.  Evidence  of  commrmications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contiibution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B,  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 
forth  in  Section  n(A)(l)-(8),  above. 

C.  Review  of  ESI 

— - Folio  wing  seizm^nofany  electronic-storage  deviee^law-enforeement-personnel-(whieh  may 

include,  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside 
technical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  wairant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example; 

®  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  marldngs  it  contains  and  opening  a  di’awer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
then’  precise  contents; 

e  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
dehberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  ai-eas  to  determine  whether 
occmrences  of  language  contained  in  such  storage  areas  exist  that  ai’e  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Law  enforcement  personnel  will  inalce  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n.A  and  II.B  of  this  Attachment.  However,  law  enforcement  persormel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  die  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedm'es  designed  to  collect  evidence  in  a  maimer  reasonably  designed  to  protect 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedui’es  shall  include 
use  of  a  designated  “tilter  team,”  sepai'ate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Safs  Deposit  Box  '^|Located  at  the  TD  Bank  Branch  at 
500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/items  contained  therein.  See  Att.  C 


Case  No, 


SEARCH  AND  SEIZURE  WARRANT 


Toi  Anyauthorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  a^^Mbe  the  property  to  be  searched  and  give  its  location)  \ 

Safe  Deposit  Box  Located  at  the  TD  Bank  Branch  at  500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/items  contained  therein, See  Attachment  C 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)  \ 

See  Attachment  C 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or 


before  ^ 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  1 0  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJInitials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Dfor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 


Date  and  time  issued:  1^1  t-lTfrfy  I?. 

•  I  .Jud<xe  ’s  sionath 


»y\ 

Judge ’s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev,  01/09)  Search  and  Seizure  Warrant  (Page  2) 

Return 

Case  No.: 

Date  and  time  warrant  executed:. 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ 

Executing  officer ‘s  signature 


Printed  name  and  title 
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ATTACHMENT  C 

I.  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  the  TD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box^^^Jrhe  safe  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

II.  Items  to  Be  Seized 

_ A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses _ _ ^ 

The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  sources,  from  January  1,  2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  cormection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contrihution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 
forth  in  Section  II(A)(l)-(8),  above. 

C.  Review  of  ESI 

_ Pollowiug  seizure  of  any  electronic  storage  device,  law  enforcement  personnel  (which  may 

include,  in  addition  to  law  enforcement  ofScers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside 
technical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  fiom  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 


for  the 

Southern  Distiict  of  New  York 


In  the  Matter  of  the  Seai'ch  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728, 
New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  D 


]  c 

)  Case  No. 

i  8  MAG 


SEARCH  AND  SEIZURE  WARRANT 


969 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
ofthe  following  person  or  property  located  in  the  _ Southern  Disriictof  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein.  See  Attachment  D 

The  person  or  propeity  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  D 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
propeity.  ,  '  !  / 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 

/  .  •  (riot  to  exceed  14  days) 

^  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find'reasonable  cause  has  been 

established.  >  ’  ,  ,  ' 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  waiTant  ahd  a  receipt  for  the  propeity 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  propeity  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  Warrant,  must  prepare  an 
inventoiy  as  required  by  law  and  promptly  return  this  wairant  and  inventoiy  to  the  Clerk  ofthe  Court. 

_ Upon  its  return,  this  wairant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  of  the  Comt. _ 

USMJ  Initials 


D  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  tidal),  and  authorize  the  officer  executing  this  wan'ant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
SQSX'ohQdoi' seized  (check the  appropriate  box)  Ofor  _ dsys  (notto  exceed 30). 

□until,  the  faclsjustifyuig,  the  later  specific  date  of  : ' ,  j  _ _ _ 


Date  and  time  issued:  V-  $  /'j 

'7:  fH  l^/p 

City  and  state:  New  York.  NY _ _ 


jf  Jiidgs 's  siptainre 


Hon.  Henry  B.  Pitman.'  UtS.  Magistrate  Judge _ 

Printed  nd/ne  dud  tifle  'i 


i 

[ 

)' 


f; 

ij 
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AO  ,93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 

Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  imder  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  wan'ant 
to  the  Comf . 


Date:  _ 

Executing  officer 's  signature 


i 

I 


\ 


\: 


i: 


li 

h 


Printed  name  and  title 
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ATTACHMENT  D 

I,  Premises  to  be  Searched^ — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  Y ork.  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  1 7th  floor  of  the  hotel. 

II.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence^  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  ffaud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows; 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transferanvintoest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  ffom  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D,  Cohen  &  Associates, 
or  evidence  of  the  pmpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  • 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  armual  income,  income  soiu'ces,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  rehirns,  personal  financial  statements,  and  banlc  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and 
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Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Kai'en  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Kai'en  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
"David'  Pecia’rand/oi"“Dylan^Howard"abouEDonald^Ti'urap,^theM’rump^Campaign7  Stephanie- 

Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  wMi  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reirabui'sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  loiowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requhements,  and  campaign  contribution  limits. 

0.  Commimications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accoimts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  accormt  or  loan  at 
that  financial  institutiom  the  nature  of  arry  business  or  entity  associated  with  an  accormt  at  a 
financial  institution;  the  somne  of  funds  flowing  into  arr  aCcormt;  or  the  propose  or  natoe  of  any 
financial  transactions  involving  that  financial  institution,  finm  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  deslctop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  wainant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include; 

1 .  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physical  keys,  enciyption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 

_ _ cnncerningThe  configuratiounf  the  seized  or  copied  computer  devices  or  storage  media. _ 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
persoimel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  sur-veying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer- 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  fir-st  few  “pages”  of  such  files  in  order  to  determine 
theft  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  sear-ches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

®  reviewing  metadata,  system  information,  configm-ation  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  seai'ch  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
If.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedur'es  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
addr'ess  potential  privileges. 


I; 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

■  for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728, 
New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein.  See  Attachment  D 


Case  No. 


SEARCH  AND  SEIZURE  WARRANT 


'To:  Any  authorizedlaw  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 


(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Loews  Regency  Hotei,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  ciosed  containers/items 
contained  therein.  See  Attachment  D 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  D 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


4-Y^-l8 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory-  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 


Date  and  time  issued:  A/  Urr\ry  PH 

®  j  Judge ’s  signatur 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  ojficer  's  signature 


Printed  name  and  title 
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ATTACHMENT  D 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

Room  1 728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  1 7th  floor  of  the  hotel. 

IL  Items  to  Be  Seized 

_  ytrTEvidence,  Fimit^andTnstrumentalitiesofthe^SubjMt  Offend  " 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(banlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  traTjsfe^ii^iiteigst  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^^and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  ineluding  any  doeuments 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Assoeiates, 
or  evidence  of  the  purpose  of  aecounts  opened  in  the  name  of  Miehael  D.  Cohen  &  Associates.  ■ 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  eash  and  eash  equivalents, 
monthly  and  annual  income,  ineome  sourees,  and  other  assets,  whether  held  personally  or  through 
entities,  ineluding  tax  returns,  personal  financial  statements,  and  bank  reeords,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^^^^^^^^^^^^^^^|and/or  by 
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1,  2012  to  the  present. 


,  and  any  payments  by  I 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
-David-Eecker,-and/or-Dylan-Howard-about-Donald-Trump,-the— Trump-Carnpaign,-Stephani& 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tmmp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 


n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accormts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1 .  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage-  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
ILA  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Soutliern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

An  Apple  iPhone  with  Phone  Number^^^| 
See  Attachment  E 


CaSeNo, 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorizecnaw  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
ofthe  following  person  or  propeity  located  in  the  Southern  Dishictof  _ New  York 

(identify  the  person  or  describe  theproperty  to  its  location)". 

An  Apple  iPhone  with  Phone  Number  See  Attachment  E 


The  person  oi  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify’  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  E 


propeity. 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


YOU  ARE  COMMANDED  to  execute  this  waii'ant  on  or  before 


4' 


-  I  (iiat  ip  exceed  14  days) 

m  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  hight  as  i’  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  ofthe  wajTant  and  a  receipt  for  the  propeity 
taken  to  the  person  fi-om  whom,  or  fi'om  whose  premises,  tlie  propeity  was  talteq,  or'  leave  the  copy  and  receipt  at  the 
place  where  the  propeity  was  taken.  •.  .  ' 

The  officer  executing  this  waii'ant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  tliis  waiiant  and  inventory  to  the  Clerk  ofthe  Courti 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  ofthe  Court. _ 

USMJ  Initials 


O  I  find  that  immediate  notification  may  have  an  adverse  result  hsted  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  wai'rantto  delay  notice  to  the  person  who,  or  whose  property,  will  be 
seai'ohed  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□rmtil,  the  facts  justifying,  the  later  specific  date,  of  _ 


Date  and  time  issued:  f-  /S' 

1'  s~  t-f 

City  and  state:  New  York.  NY  _ 


!  ' 


Judge  *'S>signainve 


Hon.  Henty:^.,  Pitman U . S IVIaaistratRi  .iudnp. 
'  '  Printed  name  and  title 
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Return 

Case  No.: 

Date  and  time  waixant  executed; 

Copy  of  warrant  and  inventory  left  with: 

Inventoiy  made  in  the  presence  of : 

Inventoiy  of  the  propeify  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declai'e  under  penalty  of  peijuiy  that  this  inventory  is  correct  and  was  retoned  along  with  the  original  waixant 
to  the  Court. 


Date:  _  _ 

Executing  officer ’s  signature 


Printed  name  and  title 
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ATTACHMENT  E 

I.  Device  Subject  to  Search  and  Seizure  —  Subject  Device-1 

The  device  that  is  the  subject  of  this  seai'ch  and  seizure  warrant  (“Subject  Device-l”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


Duiing  the  execution  of  this  search  waiTant,  law  enforcement  personnel  ai'e  authorized  to 
depress  the  fingerpiints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subj  ect 
Device- 1,  or  hold  Subject  Device- 1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


IL  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  natee  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  goveinment,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device- 1  for  evidence,  hurts,  and  inshumentahties  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
banlc  entries),  1014  (false  statements  to  afmancial  institution),  1343  (wire  hand),  and  1344  (banlc 
hand),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Banlc,  Mekose  Qedit  Union,  and/or  taxi 
medallions,  horn  Januaiy  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfe^^ntajest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^Hmd/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mekose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  nicluding  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  horn  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidenee  of  income  to  Michael  D.  Cohen  &  Assoeiates,  including  any  documents 
or  eoiiununications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  horn  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  aceounts  opened  in  the  name  of  Miehael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


1 ,  XU  1 X  to  me  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosm'e  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Ti-ump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  hrc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tramp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  hr  the  Tr-ump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Tramp  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sorrrces  of  negative 
publicity  involving  Trump’s  relationship  in  the  rrm  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  cormection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  cont-ibution  limits. 

o.  Commurrications  with  others,  including  Jeffi-ey  Getzel  and/or  other  acconntants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  fi'orn  Januar-y  1,  2013  to  the 
present. 


Cohen  and 


Evidence  relating  to  agreemerrts,  loans,  and/or  financial  tr-ansactions  between 

|and/or  entities  controlled  by  mHHHIHi 

[to  Cohen,  from  January 


and  any  payments  bj 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  frrrancial  institution  related  to  the  intended  pmpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  accormt  at  a 
financial  institution;  the  soru'ce  of  funds  flowing  into  an  accormt;  or  the  purpose  or  natui-e  of  any 
financial  transactions  involving  that  financial  institution,  fi-om  January  1,  2013  to  the  present. 
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If  the  Govemment  detemimes  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pui'suant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Govemment  will  return  Subject  Device-1,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedm’es  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  fiomthe  investigative  team,  in  order  to  address 
potential  privileges. 
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United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

An  Apple  iPhone  with  Phone  Number 
See  Attachment  E 


Case  No. 


SEARCH  AND  SEIZURE  WARRANT 


To;  Any  authorizedTaw  enforcement  officer’ 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  its  location)'. 

An  Apple  iPhone  with  Phone  Number^^^^^^^f,  See  Attachment  E 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  E 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 

Sl  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJlnitials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 

Date  and  time  issued: 


r 


Judge ’s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court, 


Date:  _  _ 

Executing  officer’s  signature 


Printed  name  and  title 
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ATTACHMENT  E 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 


The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-l”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device- 1,  or  hold  Subject  Device- 1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


II.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  persormel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device- 1  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


Imd/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  cormection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  fiom  January  1, 
2013  to  the  present. 


Evidence  relating  to  agreements,  loans,  and/or  financial  tramactinn^be^em 

|ind/or  entities  controlled  by 

^^^^|to  Cohen,  fiom  January 


,  and  any  payments  by 


1,  2012  to  the  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Chfford  or  others  in  coimection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  fiom  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device- 1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device- 1,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  aiid  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  he  searched 
or  identify  the  person  by  name  and  address) 

An  Apple  iPhone  with  Phone  Number 
See  Attachment  F 


SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  seai'ch 

ofthe  following  person  or  property  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  its  location)'. 

An  Apple  iPhone  with  Phone  Number  See  Attachment  F 


The  person  or  properly  to  he  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  F 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  sei  ze  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  4^  ^  ....  ,  ^ 

(not  ip  exceed  14  dftys) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m,  □  at  any  time  in  the  day  or  night  as  I  fincj  reasonable  cause  has  been 

established.  '  \  .  , 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  waffant  and  a  receipt  lot  the  property , 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the,  copy  and  receipt  at  the 
place  where  the  propeity  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  dmfng  the  execution  of  the  wai'rant,  must  prepai'e  an 
inventoiy  as  required  by  law  and  promptly  return  this  wairant  arid  inventoiy  to  the  Clerk  of  the  Couif . 

_ Upon  its  return,  this  wanant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  of  the  Comt. _ 

VSMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
SQaichsA  ox  SQYZqA.  (check  the  appropriate  box)  Dfor  _ days  (not  to  exceed  30). 


□until,  the  facts  justifying,  the  later  specific  date  of 


Date  and  time  issued: 


S'-/ s 
7‘  A  y //) 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name,  and  title  > 
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ATTACHMENT  F 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 

Dming  the  execution  of  this  search  waiTant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingeiprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-2,  or  hold  Subj  ect  Device-2  in  front  of  Cohen’ s  face  to  activate  the  F  ace  ID  sensor,  in  order 
to  gain  access  to  tlie  contents  of  any  such  device  as  authorized  by  this  waixant. 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  persoimel  assistmg  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violatiorrsof  18U.S.C.  §§371  (conspnacy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  afinancial  institution),  1343  (wke  fraud),  and  1344  (fiaulc 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^^ind/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

d.  Evidence  relating  to  Essential  Consultants,  EEC,  includiug  any  documents  or 
commrmications  that  indicate  the  nature  and  pmpose  of  payments  made  to  or  fi'om  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  mdividuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  pmpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D, 
Cohen  &  Associates. 
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£  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records,  from  January  1, 
20 1 3  to  the  present. 


Cohen  andl 


Evidence  relating  to  agi'eements,  loans,  and/or  financial  transactionsbetwem 

|and/or  entitie^ontrol]c^yH^^|^^|^^^| 
and  any  payments  by^^^^^^^f  to  Cohen,  from  January 


1,  2012  to  tire  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Kar'en  McDougal,  or  then 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  arry  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involvurg  Michael  Cohen,  Donald  Trirmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Kar-en  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howar'd  about  Donald  Tmmp,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Tramp  Campaign,  and  coordination  or 
consultation  with  the  Trirmp  Campaign. 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  soirrces  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relatmg  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Chfford  or  others  in  connection  with  the  election. 


n.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requnements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relatmg  to  Cohen’s  banlc  accormts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  accoujit  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  pmpose  or  nature  of  any 
financial  fransactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizm-e  pursuant  to 
Federal  Rule  of  Criminal  Procedm’e  41(c),  the  Government  will  return  Subject  Device-2,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attacliment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  fiomthe  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

An  Apple  iPhone  with  Phone  Number 
See  Attachment  F 

SEARCH  AND  SEIZURE  WARRANT 

Tbi  Any  authbfi^d  law  enforcemenTbfficer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  Us  location)'. 

An  Apple  iPhone  with  Phone  Number^^^^^^^Hlee  Attachment  F 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  F 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 

(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

O  I  find  that  immediate  notification  may  have  an  adverse  result  listed  m  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  nifdr  _ days  (not  to  exceed 30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 

Date  and  time  issued:  K  (  B.  Pm  \n»v\ _ 

'*  *  f  Judge’s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 

Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  properly  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer’s  signature 


Printed  name  and  title 
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ATTACHMENT  E 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


II.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violations  ofl8U.S.C.§§371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  thal  Cohen  has 
wilh  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  fiom  January  1, 
2013  to  the  present. 


g.  Evidence  relating  to  agreements,  loans,  and/or  fmancial  transactions  between 


and/or  entities  controlled  by  | 


and  any  payments  by  | 


[to  Cohen,  fiom  January 


re  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
pa}mients  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
pa}mient  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  fmancial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
fmancial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-2,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  106  (SONY  Rev,  01/17)  Application  for  a  Search  Warrant 


United  States  District  Court 


for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel.  540  Park  Avenue,  Room 
1628 


) 

) 


APPLICATION  FOR  A  SEARCH  AND  SEIZURE  WARRANT 

I,  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 
property  to  be  searched  and  give  its  location): 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  a  Suite  that  Encompasses  Rooms  1628, 1629,  and  1630  New  York,  New  York  10065 

Tocated  in  the - ^Southern - Districtof—  New  York  ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  be  seized)'. 

See  Attached  Affidavit  and  its  Attachment  A 


The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (checkone  or  more): 
0^vidence  of  a  crime; 

S^ontraband,  fi'uits  of  crime,  or  other  items  illegally  possessed; 

3^roperty  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 
□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 


Code  Section(s)  Offense  Description(s) 

18  DSC  371, 1005, 1014, 1343,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial 
1344;  52  usc  30116  and  30109  institution,  wire  fraud,  bank  fraud,  and  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

See  Attached  Affidavit  and  its  Attachment  A 


fif  Continued  on  the  attached  sheet. 

□  Delayed  notice  of  30  days  (give  exact  ending  date  if  more  than  30  days: _ )  is  requested 

under  18  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


Sworn  to  before  me  and  signed  in  my  presence. 


Date: 


:  4 


Tttl 


City  and  state:  New  York,  NY 


Hx>A(3rcvt,(je  P  i  t  '  > 

Printed  name  and  title  A 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  Loews  Regency  Hotel,  540  Park  Avenue, 
Room  1628,  a  Suite  that  Encompasses  Rooms 
1628,  1629,  and  1630  New  York,  New  York 
10065,  and  Any  Closed  Containers/Items 
Contained  Therein 
Reference  No.  2018R00127 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


Special  Agent.  Federal  Bureau  of  Investigation,  being  duly  sworn. 


deposes  and  says: 

1.  Introduction 
A.  Affiant 

1.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  On  or  about  April  8,  2018,  the  Honorable  Henry  B.  Pitman,  United  States 
Magistrate  Judge,  issued  a  search  and  seizure  warrant  for  the  premises  known  and  described  as 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein.  The  warrant  and  my  supporting  affidavit  (the 
“Affidavit”)  are  appended  hereto.  The  Affidavit  is  incorporated  herein  by  reference  in  its  entirety 
as  Exhibit  A. 
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3 .  On  or  about  April  9, 20 1 8,  based  upon  a  conversation  with  another  law  enforcement 
agent  who  spoke  to  an  employee  of  Loews  Regency  Hotel,  I  learned  that  Michael  Cohen  is  in  feet 
staying  in  Room  1628  (in  a  suite  encompassing  rooms  1628, 1629,  and  1630)  (collectively,  “Room 
1628”),  not  Room  1728.  Accordingly,  I  respectfully  submit  the  attached  amended  warrant 
pursuant  to  Rule  4 1  of  the  Federal  Rules  of  Criminal  Procedure  for  the  following  Subject  Premises: 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein  (“Subject  Premises-4”).  For  the  reasons  detailed  in 
the  Affidavit  and  herein,  I  believe  that  there  is  probable  cause  to  believe  that  Subject  Premises-4 
contains"evidencerlhiits,-andTnstmmentalities-of'viorations-of-18“UTS.G.“§§H005  (false  bank 
entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  Ifaud),  and  1344  (bank  fi'aud) 
(collectively,  the  “Banlc  Fraud  Offenses”),  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371 
(conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

4.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 
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5.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Sworn  to  before  me  on 
9th  day  of  April,  2018 


Special  Agent 
FBI 


HON.  HENm  B.  PITMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 


I.  Premises  to  be  Searched — Subject  Premises»4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(banlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^|md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 
Cohen  and^^^^^^|^|^^^^^^^^^and/or  entities  controlled  by 

2 


2017.08.02 


1,  2012  to  the  present. 


and  any  payments  by  I 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with'the'Trump'Campaignr^  - - - - - — 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1 .  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
persormel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  persormel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
theii'  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

®  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n.A  and  n.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  Ifom  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United  ; 
States  of  America  for  a  Search  and  Seizure  ; 
Wan'ant  for  the  Premises  Known  and  Described  ; 


as  (1)  502  Park  Avenue,! 


iNew 


York,  New  York  10022,  (2)  Michael  Cohen’s  : 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  ; 
York,  New  York  101 12,  (3)  Safe  Deposit  Box  #  : 
^(Located  at  the  TD  Bank  Branch  at  500  Park  : 
Avenue,  New  York,  New  York  10019,  and  (4)  ; 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  : 
1728,  New  York,  New  York  10065,  and  Any  i 
Closed  Containers/Items  Contained  Therein,  and  ; 
the  Electronic  Devices  Known  and  Described  as  : 
^^j^Anple^iPhone-with-Phone-Number-  - 

^^^^|Bm^^^i^Apple  iPhone  with  Phone  : 
Mumber 

Reference  No.  2018R00127  : 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

1.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  fi-auds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

,  2.  I  malce  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 

Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  infonnation  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
infonnation  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  course 
of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations'of  others  are-reported  herein^ they  are  reported-in  substanee  and-in  paid^exceptwhere 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 
4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  located  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Pai'k  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^^^loor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below.  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  101 12.  The  building  located  at  30  Rockefeller  Plaza 


^  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transfeired  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Preraises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 

branch  location  at  500  Paiic  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 
maintained  by  TD  Bank,  I  have  learned  that  the  safety  deposit  box  is  approximately  five  inches  by 
ten  inches  in  size,  and  is  marked  as  box^^^|rhe  safety  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Baura^Cohen; - - - - - ^ - 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  fi'om  January  8  to 
April  8, 2018.^  Onor  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taldng  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  tire  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


^  Although  the  quoted  price  contemplated  a  three-month  stay  fi'om  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
infonnation  demonstrates  that  Cohen’s  cellular-  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “tiggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  ai’e  most  likely  present.^ 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 

Premises-4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices”)  ai-e 
particulai'ly  described  as: 

a.  Subject  Device-1  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 

Devfc^rts'subscribed  tofMichael-Cohen—Based-on-my-review-of  cellphone  location-information- 
maintained  by  AT&T,  I  have  leai-ned  that  Subject  Device-1  is  presently  located  in  the  Southern 
District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintamed  by  AT&T,  I  have  learned  that  Subject 

Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  infoimation 
maintained  by  AT&T,  I  have  leaimed  that  Subject  Device-2  is  presently  located  in  the  Southern 
District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  fi'om  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  loiow  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


^  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-tenn  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  scuweillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applieations,  ineluding  enerypted 
eall  and  messaging  applieation  sueh  as  WlratsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pietures  and  videos;  save  and  store  notes  and  passwords;  and  store  doeuments. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  helow,  I  believe  that  there  is  probable  eause  to  believe  that 
the  Subjeet  Premises  and  Subject  Devices  contain  evidence,  fiuits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  1005  (false  bank  entries),  1014  (false  statements  to  a  finaneial 
institution),  1343  (wire  fraud),  and  1344  (banlc  fraud)  (collectively,  the  “Banlc  Fraud  Offenses”), 
-52-^U7S-Gr-§§-301T6(a)(T)(A)-and— 30109(d)(T)(A)(l)-(illegal~Gampaign--contributions)-(the- 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other 
Subjeet  Offenses)  (eollectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“US AO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Offiee  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  fi'omthe  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  eontent  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  seareh 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a. 


On  or  about  July  1 8, 2017,  the  FBI  sought  and  obtained  a  seareh  wan'ant  for 
emails  in  the  account^^^^^^J^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1,  2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 
for  content  stored  in  the  iCloud  aecount  assoeiated  with  Apple  ID  ^^^^^|@gmail.eom  (the 
“Cohen  iCloud  Aceount”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  seareh 

warrant  for  emails  in  the  Cohen  Gmail  Aceount  sent  or  received  between  June  1,  2015  and 
November‘^13720  l7-(the-“Second  Cohen  GmaiFWarrant—)^ - ^ - 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  seareh 

warrant  for  emails  in  the  aecount  “Cohen  MDCPC  Aecount”)  sent  or 

reeeived  between  the  opening  of  the  Cohen  MDCPC  Aecount'*  and  November  13, 2017  (the  “First 
Cohen  MDCPC  Warr-ant”). 

8.  The  SCO  has  since  referred  certain  aspeets  of  its  mvestigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
eontent  information  obtained  pursuant  to  tire  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 


'*  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  prrrsuant  to  eourt  order,  the  serviee 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  aecormt  contained  emails  from  the  approximate  period  of  Mareh  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  WaiTant.^  A  filter  team 
working  witli  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  wairants 
for  privilege. 

9.  On  or  about  February  28,  2018,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 2017  and  Februaiy  28, 2018  (the  “Thu'd  Cohen  Gmail  Warrant” 
and  the  “Second  Cohen  MDCPC  Wairant”).  The  content  produced  pur'suant  to  these  waiTants  is 
subject  to  an  ongoing  review  for  privilege  by  an  SDNY  filter  team.® 

- ^10: — M^he-emails-seareh"Wan'ants-deseribed-above-are-refen'ed-to-collectively-as-the 

“Cohen  Email  Warrants.” 

11.  ,  On  or  about  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  a  waiTant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8,  2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electi'onic  technique,  commonly  known  as  a  “tiiggerfish,”  to  determine  the  location  of  Subject 
Device-1  and  Subject  Device-2. 

n.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  Disb'ict  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  fi-om  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

®  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,2018. 

®  On  or  about  February  28,  2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  eurrently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  seiwed  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

13.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  infoimation  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banlcs  m  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approxhnately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
irrdetaifbelowriU'these-finaneiaTstatements^and  indiis-orafand  other-written-statements  to  these- 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  I'eceiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  diselose  tens  of  thousands  of  dollar's 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banks  fi'om  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

in  connection  with  acquisition  of  the  taxi  medallions  securing  Cohen’s 

debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  malcing 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  fr'om  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extr'amar'ital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contiibution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pui'suant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premises  to  (a)  receive  documents  related  to  the  transaction  intended  to  relieve  Cohen  of  his  taxi 
medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 

receive  documents  and/or  conduct-meetingsu’elating  to  his-finanees-and-assets^some-oTwhich^as - 

noted  above  and  as  detailed  further  herein,  he  has  concealed  from  tire  banks  in  cormection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  tlrat  may  not  have  been  disclosed  to  banlcs  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  elecfronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banlcs,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses^ 

The  Bank  Fraud  Scheme 
(i)  Cohen ’s  Statements  to  Sterling  National  Bank 

: - L6 _ As  set-forth-in^detaiLbelow.  inf2fl_y-._Cohen.  through  LLCs  controlled  by  him  and 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling”)  and 
the  Melrose  Credit  Union  (“Mehose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Uiough  entered  mto  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  from  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effoif,  Cohen  made  a  series  of  representations 
to  Sterling  and  Mehose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  pubhc 
sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Ernployee-1”)  and  two  other 


^  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device-1  or  Subj  ect  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  EEC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  fi'om  Capital  One  bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  paify  made  montlrly  payments  to 
Coheitrwllo'IrrtaiTrused  somemff hose-proceeds  to  malce  his-monthly-loan-payments-to-Gapital- 
One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  propeify  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber — taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  temr  credits,  as  the  mai'ket  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — like  the  loans  held  by 
Cohen — ^were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


®  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agi'eed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  in  Sterling’s  files — ^was  greater  than  his  previous  debt  at 
Capital  One  Banlc  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 
Cohen  to  cash  out  the  proceeds  from  the  hansaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8, 2014,  each  of  Cohen’s  sixteen  taxi  medallion  LLCs  entered  into  loan  agi'eements 
and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 

~December-87^016T-Eaehdoamwas  signed  by  Michael  or-Laura  Cohenrdepending-on-who  was-the- 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  addi'ess  for  Subject 
Premises- 1 .  The  loans  were  also  each  secui'edby  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agi'eements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises- 1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subject  Premises- 1 .  In  total.  Sterling  agreed  to  lend  approximately 
$22-  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements.  Sterling  transferred  45  percent  of  Cohen’s 
taxi  medallion  debt  to  Mehose.^ 


^  Mehose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administi'ation  (“NCUA”). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  witli  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Finaneial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.^°  From  my  review  of  a 
Sterling  eredit  memorandum,  dated  September  29,  2014,  I  Icnow  tliat  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  esthnated  by  Sterling)  exceeded  $42  million, 
and-the  net-woilh- of- Cohen — ^who-was-the-direcFobligor-underAh e-guarantee  agreements==was — 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  reeommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Mehose.  I  Icnow  from  records  maintained  by  Sterling  and  an  inteiwiew  with  Sterling 
Employee-2  that,  beginning  in  or  ai'ound  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  malcing  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  from  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen — 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occun-ed  on  September  8, 

Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 

14 
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2015 — during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  tlrat  same  email,  Sterlmg 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  infonnation 
“indicate[d]  a  shong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterlmg  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  montlily  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
mterview  with  Sterling  Employee-2, 1  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 


-individuafto  whom  Cohendeases  the-medallions  had  again  reduced-inonthly  payments  to  Cohen.EL 


know  fi-om  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — both  internally  and  with  Cohen— of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.”  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments,  Sterling  and  Mehose  agi'eed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Mehose  and  extending 
the  loan  maturity  date  to  December  8,  2017. 

h.  I  know  fi'om  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 


Cohen  had  a  potential  buyer  of  his  taxi  medallions,  namedi 


who  would  agree  to 


”  Based  on  my  review  of  property  records,  I  know  that  on  or  about  October  28,  2015,  ar-ound 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises-1 — as  collateral,  Cohen  transferred  Subject  Pr-emises-1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Mehose.  Based  on  my  review  of  reeords  maintained  by 
Sterling,  as  well  as  the  inteiwiews  with  Sterlmg  Employee- 1  and  Sterling  Employee-2  refereneed 
above,  I  Icnow  that  by  or  before  Oetober  20 1 6,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterlmg,  and  my  paificipation  in  an  interview  with  Sterling  Employee-2,  tliat  as  a 
condition  of  tlie  transfer  of  the  medallion  loans — and  because  Sterling  was  unfamiliar  with 
^^^^^^^-Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 

- approximately  one  million  dollarsrprioi'-to  the  fransfer-r-Gohemrejeeted  this-requesCinitially^-But — 

on  or  about  January  31, 2017,  Cohen  told  Sterling  Employ ee-1,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with^^^^^^f  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 
about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  requfred  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
fi'om  Cohen  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  teims  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 2017,  Sterling  Employee- 1  told^^^^^^^^^| 
that  Mefrose  had  agreed  to  the  deal  in  principle,  and  that  Sterlmg  would  be  sending  the  parties  a 
teim  sheet  shortly. 

j.  In  order  for  the  banlcs  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  infoiniation  frnm  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee- 1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee-1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  fi’om  Cohen’s  accountant,  .Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
the  infoiTnation  in  the  statement  came  from  Cohen  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$41,95 5,000rtotaHiabilities  of  $39rl  30,000,-and-a-net- worth“Of-$2782-55000^  The-May-20 1 7- 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  eompanies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence.^^ 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1, 1  have  learned  that  Sterling  Employee- 1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  aecuracy,  and  Sterling  Employee-1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  Including  the  eash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and^^^ 
^^^^^^^ttaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


Based  on  my  review  of  Cohen’s  financial  statements,  1  know  that  the  precipitous  decline  in 
assets  fi'om  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreeiation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Mekose,  Cohen,  Tire  term  sheet  included  a  cover  letter  addressed 

to  Cohen  at  Subject  Premises- 1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee-1  sent  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet, ^^^^^^^^^^would  borrow  $20,000,000 
from  Sterling  and  Mehose,  to  be  secured  by  the  medallions  that^^^^^^^was  to  acquire  fi'om 
Cohen. 

m.  Aspartoftheagi'eement,  according  to  tire  teim  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 

-repaid-by-Gohen-andThe-  two-banfcsr-witlr  Cohen  paying -fifty-percent  and  the-banlcs^dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal.  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agi-eement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Mehose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars — because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  paif  of  the  agi'eement.  Sterling 
and  Mehose  also  agi'eed  to  relieve  Cohen  and  his  wife  of  the  personal  guai-antees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^^^transaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Mehose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  hansaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Mehose  (as  well  as  Mehose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1 .  Additionally,  on  or  about  October  5,  2017,  Cohen 
re-sent  Sterlmg  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 
30,  2017  (tire  “September  2017  Financial  Statement”). 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
-included-aeover-letter-from-Jeffi-ey-Getzelj-Cohen-^accountant,-stating,4n-sumand-Substance,-thal 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  tire  first 


Based  on  my  review  of  Cohen’s  financial  statements,  I  Icnow  that  this  further  decline  m 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thiify-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whicl^va^onsiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^^Hterm  sheet. 
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time,  he  indicated  was  held  by  a'trast).^^  The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements — ^i.e.,  in  or  around  September  2017 — Cohen  stopped  paying 
montlrly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 

— --prineipaEand-intei-est-payments-on-his-medallion  loans— By-in- or  about-December~-201-7x  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  deteimined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Coher^^^^^^|ransaction  was  favorable  for  the  bank 
-  that  is,  that  ^^^^^^tvould  be  a  better  boiTower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises-l.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Steiiing  and  Cohen’s  medallion  corporations.  Tire  notice  of 
default  was  addi'essed  to  Cohen  at  Subject  Premises- 1 .  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee- 1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  t'ansaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen-^^^^^^|ransaction,  Cohen  would  “bring  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24,  2018,  that  at  the  closing  of  the  Cohen^^^^^f  transaction.  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen^^^^^^Jti-ansaction,  however,  did  not  close.  On  or  about  January 

29,  2018,  attorney  emailed  attorneys  for  Sterling  and  stated  that  “at  this  time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go-forwardT^^ - - . - ^ - 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  Icnow  that  after  the  Cohen-^^^^^^deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  talcen  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  Icnow 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  com’se  of  reviewing  the  failed 
Cohen-^^l^^l  tmnsaction,  Sterling  Employee-3  questioned  Cohen  about  the  price 

was  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  witlr^^^^^| 

t.  On  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  addi'ess  was  the  address  for  Subject  Pi-emises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  larger  monthly  interest  payments, 

u.  On  or  about  Februaiy  1,  2018,  Cohen  emailed  Sterling  Employee-3  and  pi'oposed 
“[pjayiuent  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Steiding]  will  waive 
past-due  amounts^^but-stated—I-do-NOT  have-more- than-the  $L2-50mA^(Emphasis -in  original,) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  addi'ess  was  the  addi'ess  for  Subject  Pi'emises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 
his  current  financial  position.  In  particulai',  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agi'eement  in  principal  to  restruchu'e  Cohen’s  loans  based  in  part  of  Cohen’s  agi'eement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  lai'ger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  fi'om  Stei'ling  and  Melrose  Cash  Derived  from  Consulting  Work 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose^®)  that  he  had  insufFicient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  malce  monthly  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 
accounts  at  First  Republic  Bank  (“First  Republic”),  and  then  received  millions  of  dollars  in 
consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
accountS-and-recery-ecLthese.funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling — ^and  despite  being  asked  about  these  bank 
accounts  by  his  accountant — Cohen  misled  the  bank  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  Fhst  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pui'suant  to  a  subpoena  by  Fhst  Republic,  and  my  participation  in  and  review  of  reports  of 
inteiwiews  with  a  First  Republic  sales  manager  (“First  Republic  Employee-l”)  and  a  First  Republic 
senior  managing  dhector  (“Fhst  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 
following: 


Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Mehose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Mehose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melrose  so  that 
Mehose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^|^^^ 
transaction.  Based  on  my  review  of  reports  of  interviews  with  Mehose  employees,  1  also  Jarow 
that  Cohen  called  employees  at  Melrose  regarhing  the  CoherB^^^^^Hransactiori. 
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a.  Cohen  and  his  wife  have  been  customers  of  Fhst  Republic  since  approxhnately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  Fhst  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  Icnow-your- 
customer  records  on  Cohen, his  primary  physical  address  is  the  address  for  Subject  Premises-1. 

b.  On  or  about  October  26,  2016,  in  Manliattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  According  to 
account  opening  documents,  tire  primary  address  for  Essential  Consultants  LLC  was  the  address 
for-Subject  Premises=-lT— When  Cohen  opened-the-Essential  Gonsultants-Aecount^First-Republic 
Employee-1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  Icnow-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  Avhich  First  Republic 
Employee-1  entered  into  a  form^* — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  woitld  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  fi-om  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income — separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive — and  does  not 


Certain  financial  mstitutions  are  requhed  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

First  Republic  Employee-1  fust  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel,  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  reeeived^ — ^tnoney  in  eoniiection  with  real  estate  consulting  work;  in  addition,  the 
account  has  received  substantial  payments  fi'om  foi'eign  sources. 

c.  I  Icnow  horn  my  review  of  First  Republic  banlc  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  fi-om  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
fi-om  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  Icnow  the 
following: 

- - - ^ — i.-  Beginning-on-oi-aboutJanuary-ll,  20-L7,-Cohembegan.recelving-monthlyL 

payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
EEC.  According  to  public  som-ces,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  pajnnents  totaling  $583,332.98  ftom  Columbus  Nova  EEC. 

ii.  Begiiming  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  fi-om  Novartis  Investments,  SARE,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  International  AG  (“Novartis”). 
Between  April  2017  and  Februar-y  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  banlc  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Begirming  in  or  about  April  20 1 7,  the  Essential  Consultants  Aecount  started 
reeeiving  wire  payments  ftom  a  bank  account  associated  with  the  teleeommunieations  eompany 
AT&T  Ine.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  fi-om  AT&T.  In  total,  AT&T  sent 
$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  fi'om  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Indusfries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

nepartmenTofDefense,_amojig_other_custQmers. _ , _ 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbanlc,  a  Kazakhstani  banlc.  The  listed  account 
holder  at  Kazkommertsbanlc  was  a  second  Kazaldrstani  bank  named  BTA  Banlc,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  WMDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1,  2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
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Cohen  was  the  only  authorized  signatory  on  the  aeeount.  Aceording  to  aeeount  opening 
doeuments,  the  primary  addi'ess  for  MDC&A  Account  was  the  adch'ess  for  Subject  Pi'emises-l. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  cheek  from  an 
aeeount  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above.  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2,  2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 
the  balance  in  the  account  as  of  January  2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen 
never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  aceounts  to  Sterling 
during-the-negotiations -with“respeet-to-the^^^^^^^^|ansaction  or  the  subsequent-loan 
refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
WaiTants,  and  my  review  of  reports  of  interviews  witli  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following; 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  thi'ough  eight  $150,000  mstallments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 
for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 
affiliated  with  BTA  Banlc.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
EEC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provided  the  address  for  Subject  Premises- 
2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 
BTA-Banlc  and  EssentiaLConsultants  dated  as-of  aboutMay  8, 2017.-The-agi'eement  indicates-that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Banlc  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $150,000.  On  or 
about  May  1 0, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Banlc,  and  attached  to  the  email 
an  invoice  to  BTA  Banlc  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 
consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consulting 
agi'eement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  ofthose  issues 
and  matters  with  respect  to  which  AT&T  Seiwices  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agi-eement  indicates  that  Essential  Consultants  had  the  addi'ess  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollai-s  .  .  .  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  drat  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contraet  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the  Affordable  Care  Act  in  the  US  and  any  other  issues  mutually  agi'eeable  to  [Essential 
Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundi:ed_Thousan(L($1.20Q,QQrt)JIS_dollars.7  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 
to  gain  access  to  relevant  policymakers  in  the  Trump  Administation. 

e.  In  or  about  Februaiy  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  fum,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squrte 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 
clients.” 


2017.08.02 


29 


20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  tlie  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  infonnation  to  Sterling  or  Mehose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
and  notes  and  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  Subject  Pi-emises-2.  At  the 
meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 

D.-Cohen-&  Associates-E.C.,  and  a  consulting-company-called-EssentiaLConsultants  LLC.  _Ci)hen_ _ 

told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  propeity),  and  liabihties 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $  12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POC  [^/c]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  Or  about  October  6, 20 1 7,  Cohen  called  Getzel  by  telephone — ^which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[l]ooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
StatementT-In  a-letter  dated-Oetober-b, -20 17,  addressed  tO-Getzel,-Cohen  stated, A‘Lhave_reviewed-^„ 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterling  in 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and^^^^^^| 

21.  Based  on  my  review  of  a  report  of  an  inteiview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  fi'om  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  Icnowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
Icnowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  His  Available  Cash 

22.  In  addition  to  witliholding  the  existence  of  his  Essential  Consultants  mcome  firom 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  firom  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  pi'ovided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  Septemher  30, 2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017. 
Additionally,  as  of  February  1,  2018,  Cohen  had  approximately  $6,000,000  in  eash  and  eash 
equivalents.  Specifically,  from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned 
the  followings - - - - - - ^ _ 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Banlc,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Banlc.  As  of  February  1, 
2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  thi'ee  aceounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  aecounts  was  $1,270,600.41. 
As  of  Februaiy  1,  2018,  Cohen  had  $1,284,996.13  in  these  aeeounts. 

e.  As  of  September  3  0, 20 1 7,  Cohen  had  $260, 689. 1 8  in  an  account  at  Signature  B  ank. 
As  ofFebmary  1,  2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checldng  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  aceounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30,  2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank — Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $4,713,935.08  in  his  accounts 
at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 

— ^First-Republicjand-Morgan-Stanley— AS'OLFebruaiyMT-2018;-Cohen-had-$6,268j7B2A9-in-his 
accounts  at  Capital  One  Bade,  City  National  Bank,  Signature  Bade,  First  Republic,  and  Morgan 
Stanley. 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  infoi-mation  regarding  approximately  $5  million  in  &nds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  repoifs  of  interviews 
with  Sterling  Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 
and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Banlc  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Banlc  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 


24.  It  appeal's  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 

connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  eai'ning  approximately  $60,000  per  month  in 
interest  income  in  connection  with  that  loan.  But,  fr'om  my  review  of  a  summai-y  of  bank  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  propeity  records  and 
--doGuments-obtained-pursuant  to  the-Cohen-Email-WaiTants,  animyiparticipation  in-arLinterview. 
with  Getzel,  I  have  learned  the  following; 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  Mai'ch  12, 

Cohen  to  approximately 

$2,000,000.^°  It  appears  that  the  promissoi-y  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and^^^^|  amended  the  promissoiy  note,  and  restructured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  apartment  in  Sunny  Isles  Beach,  Florida.  On 

or  about  April  8,  2015,  Cohen  ai^^^^^^i'estated  the  promissory  note  to  increase  the  principal 
amount  to  $6,000,000.^' 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 

The  note  states  that  the  loan  to  husband  and  wife, 

jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  '^^^^^^herein. 
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promissory  note,  Cohen’s  loan  an  interest-only  loan,  and  that  the  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  know  drat  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require^^^^^^to  pay  Cohen 
approximately  $6 1 ,250  per  month  begiiming  in  April  2015  and  ending  in  April  2019.  The  note  also 
requu'es  tha^^^^|repay  die  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  baidc  records,  I  have  learned  that,  consistent  with  the  terms 
of  the  amended  and  restated  promissory  note,  ^^^^^has  made  monthly  pa3Tnents  of 
approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 

-by-Capital-OneBank,-LhaveJeame(ithatfi‘om-ApriL20d5_toJQctober_20J  5,  jCohen.receiv_ed  checks 
fi'om  an  entity  called^^^^^^^^^^^^^^^^^^^^^totaling  $61,250  per  month,  which  he 
deposited  into  his  personal  bank  account  at  Capital  One  Bardc.^^  It  appears  from  my  review  of  bank 
sources  tha^^^^^|  is  the  of 

From  my  review  of  records  maintained  by  Capital  One  Banlc,  I  have  also  learned  that  since  October 
2015,  Cohen  has  received  checks  fr'om  an  entity  called  totaling 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 
appeal's  fr'om  my  review  of  bank  records  and  public  soui'ces  that  ^^^^is  also  the  owner  of 

In  total,  it  appeal's  that  Cohen  receives  approximately  $735,000  per  year 
in  interest  payments  fr:om^^|^| 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  2015  and  2016  tax  returns  obtained  via  subpoena  and  fr'om  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


In  April  2015,  Cohenreceircd  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but^^^^H)ften  made  the  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  from  Sterling  or  Mefrose,  or  list  it 

on  his  tax  returns.  I  have  also  leaimed  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel — his  accouirtant— about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing  ^^^^^^"axes  in  2017.^^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  infoimation  relating  to  the  interest  income  he  is  receiving  from  order  to 

secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

- - - Gohen  Had-a-Side-Agreement-With- 

26.  As  set  forth  in  detail  below,  dui'ing  the  course  of  Cohen’s  negotiations  to  sell  his 

interest  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 

igreed  to  pay  an  above-market  price 
for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agi'eed  to  pay  ^^^^^fapproximately 
$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee- 1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  tenn  sheet  was  circulated  by  Sterling 
Employee-1  to  Cohen  and^^^^^^|  The  tern  sheet  listed  Cohen’s  address  as  the  address  for 
Subject  Premises-1.  According  to  the  term  sheet,  would  bon'ow  $20,000,000 

from  Sterling  and  Melrose,  to  be  secui'ed  by  the  medallions  that  ^^^^^^|vas  to  acquire  from 


Accordingly,  this  interest  income — ^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 


had  negotiated  withi 


I:  it  appears  tha1 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  the  proposed  side 
payment  h'om  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (tlie  “Getzel  Memorandum”). 
Tire  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  theh  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paymg  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^'^ 

- - — br— Aeeording-tQ-Getzel^Cohen-told  him-the-parameters_of  the  deal,  including  the 

payment  of  $3,800,000  to  but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 

$3,800,000  to  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Mehose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^^^^^vas  aware  of  the  planned  $3.8  million 
side  payment  h'om  Cohen  to 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  US  AO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 

The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  m-lcind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  fonn  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  prohahle  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  &om  malcing  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

30.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
-TTzeDmA’.coOT  that-Tnimp  had-had  an  extramai'ital-affair-with  Cliffordj-an  adulTfihn- actress  whose- 
screen  name  is  Stonny  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supemiarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occuired  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  then-  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1, 2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  fi-om  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Tmmp  Oi'ganization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit  .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,-2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  hi  which  Trump  refeived  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 

- following-^day3-on-Octobei-8,-2016,-Trump-appearedTn-a-video-in_which-he_stated,_among_ather__ 

things,  “Fve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  ai'e  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  laiow  that 
representatives  of  the  Tiximp  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  witli  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  stoiy  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summaiized 
in  a  20 1 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  201 6, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  tliat  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  reeords^^  and  information  produced  pursuant  to 
the  iCloud  Wan'ant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  ealls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Peeker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer^^  Tramp,  and  Hope  Hicks,  who  was  then 
press  secretaiy  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content  of-the  text  messages- andxmails,H_believe_that-at-  least_some__of_these^communicatLons_ 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8,  2016,  at  approxhuately  7:20  p.m.,  Cohen  reeeived  a  eall  from  Hicks. 
Sixteen  seconds  into  the  call,  Tramp  joined  the  call,  and  the  eall  continued  for  over  four  minutes.^^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  deseribed  in  this 
affidavit  is  based  on  my  review  of  the  vCai-d  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Wan'ant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Tramp  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transfeired  to  Tramp,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Tmmp  spoke 
about  once  a  month  prior  to  this  date  —  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thiity-seconds7~Approximately  four  minutes  lately  Cohen-called-Peckenagain  andThey-spoke-  - 
for  more  than  a  minute.  Thi'ee  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
Horn  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regulai'ly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  fi'om  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howai'd  hung  up  fi'om  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomon'ow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9, 2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f  The  following  day,  on  October  10, 2016,  at  10:58  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  oppoidunity.  Spoke  to  the  client  this  AM  and  they’re  confmned  to  proceed  with  the 
opportunity  .HFhanksrDylanrOver  to  you-tworS\t-K^-26  p;m77Davidson-sent  Cohen  a  text  message 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howar-d  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^^ 

g.  Based  on  my  review  of  records  obtained  prrr-suant  to  die  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter- 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document. 

As  set  forth  helow,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  die  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agi'eement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  commimications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  leai-ned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Peeker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agi'eement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blanlc.  The  agreement  also  includes  a  signatoe  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  tliis  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 

— Gctobef  10^20 16; - - - - - 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Wairant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following; 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sentPecker  atextmessage 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  Fhst  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretaiy  of  State  of  Delaware  indicating  that  Cohen 
had  foimed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 
in  the  name  of  “Resolution  Consultants”  opened  immediately,  and  that  he  did  not  want  an  address 
on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 

-emailed-Cohen-acGount-opening-paperwork-to-complete _ Cohen-retumedThe_account_opening_ 

documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 
account  was  never  opened. 

c.  On  October  17,  2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delawai'e. 
That  same  day,  he  filed  papeiwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrairt,  and  public  som'ces,  I  know  the  following; 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear-  to  have  touched  off  a  finny  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they^re-going'with-DailyMail—Are-you  aware?”  One-rainute-lateri-Cohen  respondedr-^Call  me.”- 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heal'd 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affan  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  statmg:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  ‘TSlot  talcing  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  Iddding.  Who  are  you  tying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  US  AO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  hut  that  Davidson  was  not  taking  Howard’s  calls. 

vi .  At  6  ;4  9  p  .m . ,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes . 

c.  The  following  day,  on  October  18,  2016,  TheSmoJdngGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called;  “Donald  Trump  and  the  Poni 
Superstar,”  which  alleged  that  Trump  had  an  extramai'ital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declmed  to  comment. 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and^Penker-picked  up-againrapparently-conceming-a-transaetion-involving-GliffordT- 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’ s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Tmmp  again  and 
eonneeted  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m.^ — less  than  thirty  minutes  after  speaking  with  Tmmp — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  reeeipt  two  minutes 
later  at  9:06  a.m.  and  wMi  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 


d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  areal  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  sfteet  to  open  the  account,  so  First  Republic  Employee-2  called  First 
Republic  Employee- 1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m..  First 
^Republic~Employee-l-ealled-Cohen— I  ltnow  from-my-pai-tieipation- in  an~interview^with  First 
Republic  Employee- 1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — • 
on  the  same  floor  as  the  Trump  Organization — and  went  tlirough  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  Icnow-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  fi'om  Fii'st  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  fi'om  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 


2017.08.02 


48 


Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
addi'ess  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  coimected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thufy  seconds.  At  7:06  p.m.,, Cohen  called  Pecker  again  and  they  spoke 

for  nearly'-thirteemminutesr -At -7i24-p7m.^Howai'd-sent-aHext-message-to  Cohen  thak-ttHe-said - 

he’d  call  me  back  in  20  minutes.  I  told  him  what  you  ai-e  asldng  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  horn'  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  youi‘  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agi'eement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agi'eemeirt.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howai’d  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  thiirk.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

38.  On  October  27,  20 1 6,  Cohen  made  a  payment  to  Davidson  of  $  1 3  0,000 — ^with  the 
funds  intended  for  Clifford — -for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  infoiination  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 
Email  Wairants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confinn  that 
the  whe  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  tune  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
'BanlcrCohemcompleted  paperwork  to  wire  $1-30,000  from-the  EssentiaEGonsultants-Aeeount — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  accoimt  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instnictions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  fiinds  shall  be  disbursed  unless  &  rmtil  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  comect  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  soui'ces,  and  bank  records,  I  Icnow  the  following: 
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a.  On  October  28,  2016,  at  1 1:48  £Lm.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  ealls  to  Davidson,  Pecker, 
and  Howai'd  throughout  the  day,  although  it  appears  he  may  only  have  conneeted  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  ai'e  veiy  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  Pavidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  r0T30"p  .m7,  Cohen  spoke^ tO'Hicks  for  three  minutesr - - 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “YouTl  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanlcs 
Keith.  Will  call  you  then”  to  Davidson.  Fi'om  my  involvement  in  this  investigation,  I  believe 
Davidson  was  refen'ing  to  a  signed  nondiselosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  com!  filings  that  became  publie  in  2018,1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “eonfidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  whieh  “Peterson” 
agreed  not  to  disclose  certain  “eonfidential  infoimation  pertaining  to  Pennison]”  in  exehange  for 
$  130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  refeiTed  to  in  the 
agi'eement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transfeired  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  armotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  anived  for  Cohen  at  his  Trump  Organization 
^ddfessT^On  tlie  sainenlay,^at  approximately*6:  t4“p.m7rDavidson  senLCohen-amemail  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stonny.mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Tmmp;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appeal's  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyarme 
Conway,  who  at  the  time  was  Tmmp’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4,  20 1 6,  just  thi'ee  days  after  the  Clifford  ftansaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Tmmp”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 


2017.08.02 


52 


Based  on  my  review  of  toll  records,  infonnation  obtained  pursuant  to  the  Cohen  Email  Wairants 
and  iCloud  Warrant,  and  public  som'ces,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  ai'ound  the  time  of  this  article’s  publication — just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
fraction.  Specifically,  I  have  learned  the  following; 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 

— lawyer  .““The  forwarded  emaiPwasTom-a  Wall  Street-JoumaFreporter^-  and  askedTor-  comment 
fi'om  Tmmp  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talldng  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  mto  hiding  and  um'eachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howai'd  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  refeiTing  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  tlie  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howai'd  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  refeuing  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approxhnately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  aiiicle"if““everyone-denies7”  - Howard"  responded~‘Because-there-is-the  payment  fi'om 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approxhnately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  artiele  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5,  2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  tlris  investigation,  I  believe  Cohen  was  refen'ing  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  uimecessary  at  that 
time.  Based  on  a  text  message  ftom  Hicks  to  Cohen,  I  believe  that  later  that  morning,  Pecker 
spoke  to  Trump. 

41.  On  or  about  November  8, 2016,  Tmmp  won  the  election  for  President  ofthe  United 

States!  "  .  ^ — — - 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  govermnent 
watehdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  eampaign  finance  laws  by  malcing  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  WaiTants,  I 
have  learned  the  following; 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  eomplaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  wilting  a  book  on  Cohen’s  behalf; 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pui'suing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  Imew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that just  because  something  is  false  doesn ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transfen-ed  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  fi'om  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Tramps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  aclcnowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  {“...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  brealdng”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Tramp  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  Febraaiy  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  hun,  whether  he  and  Ti’ump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  Febraaiy  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that;  “In  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbm'sed  me  for  the  payment,  either 
dhectly  or  indhectly.” 

43 .  On  or  about  March  9,  20 1 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 

from  my  home  equity  line  and  transfeired  internally  to  my  LLC  account  in  the  same  banlc.” 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  eause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  maldng  an  in-kind  eontribution 
to  Trump  or  the  Tmmp  eampaign  in  tlie  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
eleetion.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  fiinds”  to  Clifford  and  that  the  payment 
oeeuiTed  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  tliough  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  eommunication  records  set  forth  above  make  evident 
that  C6lieircommunicateti^withrmembersmf"the””Trump- campaign- about  his-negotiation-with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advanee  of  the  fortheoming  eleetion. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45.  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Email  WaiTants,  and  the  iCloud  Wairant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  in 
furtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subjeet  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  eause 
to  believe  that  Subjeet  Premises-4,  in  which  Cohen  is  temporarily  residing,  eontains  eleetronie 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterhng  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  beheve  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1.  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Lamn  Cohen  own  (in  trust)  Subject  Preinises-1.  From  my  review  of 
Cohen’s  tax  returns,  I  Icnow  he  lists  his  primary  residence  as  Subject  Premises-1.  Additionally, 
from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Pferhises-I^hi^home.  For  raampleToror'afroutSeptember  28720E7 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  tlie  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  Ffrst  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  Yi  18(b),  18(d).  The  eonsulting  agi'eement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra\\9{c). 

47.  There  is  also  probable  eause  to  believe  that  Subjeet  Premises-1  is  likely  to  contain 
instrumentalities,  evidenee,  and  fruits  of  the  Subjeet  Offenses.  Speeifieally,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Wamants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 

medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  soui’ces, 
I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  lilcely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion  LLCs,  the  revenue  that  those  medallions  generate,  and  the 
transaction  with  Sterling  in  20 14  to  re-finance  the  medallion  loans  that  were  then  with  Capital  One 
Bank.  . 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Sterling 

addressed  docmnents  relating  to  the^^^^^^|transaction  and  Cohen’s  attempts  to  modify  the 
terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance.  Sterling  addressed  the 
transaction  teim  sheet,  see  supra  f  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  f 
16(q),  to  Subject  Premises-1 .  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 

records — such  as  records  relating  to  a  payment  fi'om  Cohen  to^^^^^^|-were  concealed  from 
Sterling  and  camiot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  knowledge 
of  the  documents. 

c.  From  my  review  of  records  maintamed  by  First  Republic,  I  loiow  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addi-esses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  18(b),  18(e).  Accordingly,  it  is  likely  that  Subject 


2017.08.02 


59 


Premises- 1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wue  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  loiowledge  of  transactions  or  the 
existence  of  funds  in  accounts. 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Sfahley^  Ci^National  Battle,  Signature^Bankrand-Bethpage- Credit  Union,-“Pknow  that-Gohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  for  his  accounts  at  each  of  these 
finaneial  institutions.  Aceordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relating  to 
these  aecounts,  ineluding,  among  other  things,  bank  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen’s 
ownership  of  the  accounts  and  his  Icnowledge  of  the  balances  in  these  aeeounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  aeeounts  or  assets  that  were 
not  disclosed  to  Sterling  and  are  not  presently  known  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  smee  2015  that  he' has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  see  supra  ^  16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”^®  The  value  of  these  investments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 

Based  on  my  participation,  in  an  interview  with  Sterling  Employee-3,  I  have  learned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  in  overseas  entities”  on  his 
2014  Finaneial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  future  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Pi'emises-1  as  the  mailing  address  for  banlc  records,  there  is  probable 
cause  to  believe  that  account  statements  for  unlaiown  banlc  accounts  or  assets  concealed  from 
Sterling  are  lilcely  to  be  found  in  Subject  Premises-1. 

f.  Based  on  my  review  of  records  maintained  by  AT&T  and  produced  pursuant  to  the 
Cohen  Email  Warrants,  I  Icnow  that  the  address  Cohen  provided  to  AT &T  for  Essential  Consultants 
is  the  address  for  Subject  Premises-1.  See  supra  f  19(c).  Therefore,  there  is  probable  cause  to 
believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 
Consultants  or  money^haT^ Hohm"  f eceivedTThrduglr^Essential  Consultants~from-"AT&Tr 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
an'angement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  aiTangements  that  Cohen,  thi-ough  Essential 
Consultants,  has  with  other  individuals  or  entities, 

g.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  firm,  and  emails 
produced  pui'suant  to  the  Cohen  Email  WaiTants,  I  have  learned  that  Getzel’s  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  retains.  See  supra  f  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  Getzel’s  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly, 
Cohen  ’  s  tax  records  are  lilcely  to  be  found  in  Subj  ect  Premises- 1 . 

h.  Based  on  my  review  of  banlc  records  and  publicly-available  documents,  I  know  that 
Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agi'eement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Pi‘emises-1  is  likely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  recoi'ds,  written  and  email  coixespondence,  and  records 
pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pui'suant  to  the  Cohen  Email  Warrants  and 
iCloud  Wan'ant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
MacBookPro  to  access  his  iCloud  account.  Based  on  my  review  of  location  records  provided  by 
Apple  pursuant  to  the  iCloud  Waixant,  I  know  that  electronic  devices  linked  to  Cohen’s  iCloud 
accounTwereused^SubjecfPfemfs^lto;  among  other  thingspplace  telephone  calls  and  backup — 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 
discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Waixants,  I 
understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  confiactors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  m  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
fi'om  Subject  Premises-1.  However,  based  on  my  review  of  a  woi'k  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  firraisliings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  —  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  waiTant  out  of  Subject  Premises- 1,  because  it  does  not 

appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 

Cohen’s  own  room,  where  such  documents  or  evidence  would  most  lilcely  be  found.^^ 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 

office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Speeifically, 

from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 

and  my  review  of  the  press  release  on  Squire  Patton  Boggs’s  website,  I  know  that  Cohen  has  an 

office  at  Subject  Pi-emises-2.  See  supra  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 

Tlohen’Ta^eemehfwitlrthe^la^firnr,  he^has  “dedicated“and  segregated-offiee-spaee”-imSquire^ 

\ 

Patton  Boggs’s  offiees  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
sepai-ate”  fr'om  the  firm’s  offiees  and  has  “locked  doors  and  its  own  looked  file  cabinets.”  See 
supra  ^  19(e).  Additionally,  I  know  that  under  the  tenns  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs’s] 
computer  network  system.”  I  Icnow  from  my  paificipation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subjeet  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  loiow  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Pi-emises-2  in  the  signatm-e  bloek 

As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-temr  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  talcen  some  evidence  from 
Subjeet  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  natoe  of  Cohen’s 
stay  at  Subject  Preniises-4  and  the  scope  of  the  work  being  done  at  Subjeet  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 

63 

2017.08.02 


on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  Icnow  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  know  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14,  2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  February  2018. 

49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  likely  to  contain 
instiTOnentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  fi'om  my  review  of 
emails  produced  pursuahf  to  subpoenarand  the^Cohen  EmaiTWarrants'and  iCloud  Wan'ant,  as-well-- 
as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  See  supra  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contam  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  201 8  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  airangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indieate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  arrangements  that  Cohen  has  with 
other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  GetzePs  accountmg  finn,  and  emails 
produced  pursuant  to  the  Cohen  Email  Wanunts,  as  well  as  my  participation  in  an  interview  with 
Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 

20(a):'Af  that  meeting,  Getzehdiscussed-with  Cohen  whether- Cohen-should  diselose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 
and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  B  ased  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintains 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appeal's  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 
Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business — such  as  contracts  with  clients 
and  records  of  payments — at  the  bushiess’  identified  location.  I  am  not  aware  of  any  addi'esses 
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associated  with  Essential  Consultants  other  than  Subject  Premises- 1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 
will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 
inst-umentalities,  evidence,  and  tmits  of  the  Subject  Offenses.  In  particular; 

a.  As  noted  above,  Cohen  has  two  bank  accoimts  at  TD  Bank.  In  or  about  November 
2017,  as  Cohen  was  receiving  substantial  income  from  consulting  work — which  he  did  not  disclose 
to  Sterling — Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  tharCohen  conceals"assetsyincluding-assets-af-TD-Bankj — 
there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 
Sterling.  Indeed,  based  on  my  fraining  and  experience,  I  am  awai'e  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  Ill  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  fii-st 
such  occasion  was  on  November  10,  2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5:39  on  that  date.^^  Based  on  my  review  of  toll  records,  I  Icnow  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later  — 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 


The  entry  in  the  banlc’s  log  book  does  not  specify  whether  this  is  A.M.  or  P.M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  Febraary  2,  2018,  which  is  during  the  time  period 
numerous  media  repoits  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appeal's  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  tuning 
of  Cohen’ s  two  visits  to  the  vault  —  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  ai'ound 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’ s 
client  —  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 
Campaign  Finance  Offenses,  such  as  documents  relevant  to  the  Cohen’s  dealing  with  Keith 
Davidson  and  the  pa5unent  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 

to  leave  in  his  apartment  wH^  cdnstructidn  worKerKwbuld  be  pre'sentr^^ - - 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Wai'rants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 
instramentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following; 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  See  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  See  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 


As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  large  volume  of  hard  copy  documents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  30, 2018,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra 
1 6(u) .  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoing  negotiations  with  Sterling  with  him  to  Subject  Premises-4,  in  order  to  reference  and 
consult  them  in  conneetion  with  these  negotiations. 

As  described~abbve,  Cohen  used  “at  l^rone^Apple“iPhone7  anrApple  iPad'Mini, 
and  a  MaeBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linked  to  Cohen’s 
iCloud  aeeount  were  used  at  Subject  Premises-1  -  Cohens’  permanent  residenee  —  to  place 
telephone  calls  and  baclcup  files  to  Cohen’s  iCloud  account.  See  supraYi  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-teim  periods  commonly  bring  portable  elech-onic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordmgly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
electronic  devices,  including  Subject  Device-1,  Subject  Device-2,  and/or  certain  Apple  products, 
that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regai'ding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Aceount,  with  his  accountant  regai'ding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howai'd  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subjeet  Premises-4,  it  is 
unloiown  whether  Cohen  will  be  physieally  present  within  Subject  Premises-4  at  the  moment  the 
wari'ant  sought  herein  ai'e  executed.  If  Cohen  is  within  Subject  Premises-4  at  that  moment.  Subject 
Device- 1  and  Subject  Device-2  -  his  cellphones  —  will  lUcely  also  be  within  Subject  Premises-4. 
If  Cohen  is  not  within  Subject  Premises-4  at  that  moment,  the  devices  will  lilcely  be  on  his  person, 
wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device- 1  and  Subject  Device-2 
a^ecently  as  today,  i^likeljrto  b^in  the“SouthdtrDistrict'ofiNew“York)r”As-such;-  this  waixant 
seeks  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 
warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 
Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  lilcely  to  contain 
evidence,  fruits,  and  insti'umentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device- 1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contam 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Wan'ant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  tunes,  contained  Apple  cellphones;  similaidy,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 
Subject  Offenses  for  the  following  reasons; 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  been  obtained  via  subpoenas  and  search  waiTants,  I  Icnow  from  my  training  and  experience 
that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 
Those  email^ontheif  hard  drivesT^I  also  know  that  individuals  oftemhave  multiple-email-aceounts,  - 
some  of  which  may  not  be  Icnown  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repositoiy  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  Icnow  that  Cohen  had  an  email  account  with  the  Tminp  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subject  Premises-1,  Subject  Premise-2  and  Subject  Premises-4  lUcely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  Icnow  fi-om  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  then- 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  electi-onic  devices  may  include 
documentation  of  Cohen’s  tme  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  tlrird  parties,  and  doeumentation  of  his  payment  to  Clifford, 
among  other  evidence  of  the  Subjeet  Offenses. 

c.  Third,  I  know  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experienee,  I  know  that  individuals  who  set  up  online  banldng  often  reeeive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  then-  financial  transactions  to 
then-  devices.  Accordingly,  there  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 
contain  evidence  of  banking  aetivity,  ineluding  the  existence  of  bank  aceormts  or  assets  that  Cohen 
dlid  not  disclo^WSteflingWMelfose:  - - 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  using  text  message  as  well  as  encrypted  communieations  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  Icnow  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experienee,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  eommunicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fi'audulent  documents.  As  a  result,  they  often  store  data  on  thefr  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  eellphone-based  “chats”  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occuiTed.  This  is  t3^ically  trae  because: 

»  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

•  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted”  on  a  home 
computer,  the  data  contained  in  the  file  does  not  actually  disappear,  but  instead  remains 
on  the  hard  drive,  in  “slack  space,”  until  it  is  ovei-written  by  new  data  that  cannot  be 
stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  the  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,”  which  is  only 

_ overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 

pages.  Thus,  the  ability  to  retrieve  ftom  a  hard  drive  or  other  electrohic^forageftnedift 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user’s 
operating  system,  storage  capacity,  and  computer  habits. 

e  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  fi-om 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition,  users  often 
keep  backups  of  then  data  on  electronic  storage  media  such  as  thumb  drives,  flash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  finits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Sectiop  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 
the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 
Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
con'espondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Mekose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tc^^^^^^^^|and/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
nadicate  the  natoe  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  coimection  with  Essential  Consultants. 


f.  Evidence  of  mcomeToTMichael  DTCohenfr^Associate^including  any  documents* 
that  indicate  the  natui-e  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  refrums,  personal  financial  statements,  and  banlc  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^^^^^^md  payments  by  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Kai'en  McDougal,  or  then 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howai'd  about  Donald  Tnimp,  the  Tmmp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Tramp  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

h7  EvidmceTelating*^to^  any  reimbursemen1ror“othei-promiseS"made-to-Cohen  “for 
payment  to  Clifford  or  others  in  cotmection  with  the  election. 

o.  Evidence  I'elating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  soui'ce  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subj  ect  Offenses  under  investigation, 
m.  Procedures  for  Searching  ESI 

A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  41(e)(2)(B)  provides  that  a  waraant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizui'e  or 
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copying  of  electi-onically  stored  infoiTnation  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  deviees  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typieally  necessary  for  a  number 
ofi'easons; 


o  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  seareh  loeation. 

a  Second,  because  computer  data  is  particularly  vulnerable  to  inadveiient  or  intentional 
modification  or  deshnction,  computer  devices  ai'e  ideally  examined  in  a  controlled 
environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  make  a  forensic  copy  of  the  storage  media  that  can  be 
subsequently  reviewed  in  a  manner  that  does  not  ehange  the  underlying  data. 

»  Thhd,  there  are  so  many  types  of  computer  hardwai-e  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  neeessary  teehnieal  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recoveiy  of  data  fi'om  a  computer 
device,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable,  tune  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein,  Squire  Patton  Boggs  is  a  functioning  law  fmn  that  conducts 
legitimate  business  uni'elated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  will  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  pei-sonnel  on  the  scene  as  may  be  appropriate  to  deteimine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enfoi-cement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidenee  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  condueted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 
personnel  involved  in  the  investigation,  including  attorneys  for  the  Government,  colleet  evidence 
in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applieable  privilege.  When 
appropriate,  the  procedures  wiirinclude  use"df  aliesignated^‘filter  teamf’  separate-and  apart  from 
the  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B,  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  fr'om  my  training  and  experience,  as  well  as  from  information  found  in 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingerprmt”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  Icnow  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  infrared  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 
called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  refen-ed  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  hont  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device’s  contents. 

63 .  In  some  circumstances,  T ouch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  securif}^featufe  ehabl^rmd^arpasscode^or^password^musfbe  usednnstead; — These— 
circumstances  include:  (1)  when  the  device  has  just  been  turned  on  or  restarted;  (2)  when  more 
than  48  houi's  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  ai'e  not  Imown 
to  law  enforcement.  Thus,  it  will  likely  he  necessary  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  front  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
seai'ch  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessaiy  because  the  government  may  not  othemise  be  able  to  access  the  data 
contained  on  those  devices  for  the  pui-pose  of  executing  the  seaixh  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  finger-prints  ai-e  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  tire  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  know  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  trauring  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 
In  the  event  that  law  enforcement  is  unable  to  rmlock  the  Subject  Devices  as  described  above 
within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 
entry  of  a  password  or  passcode  before  it~carrbeuhlbclced7 

67.  I  also  know  from  my  fraining  and  experience,  and  my  review  of  publicly  available 
materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  speeialized  equipment  that  is  not  consistently 
available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 
the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  fi'ont  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 


69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  govermnent,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
conti-ol)  will  review  the  ESI  contained  therein  for  information  responsive  to  the  warrant. 

70.  In  conducting  this  review,  law  enforcement  persormel  may  use  various  techniques 

to  detefmine^Whiclrfiles  orrt)ther*^ESEcontain  evidence -'br-fi-uits  oEthe  Subject- Offenses.  -Such — 
techniques  may  include,  for  example: 

o  surveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  determine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance); 

•  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

•  performing  electronic  keyword  searches  through  all  electronic  storage  areas  to 
determine  the  existence  and  location  of  data  potentially  related  to  the  subject  matter  of 
the  investigation^'^;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Keyword  searches  alone  ai'e  typically  inadequate  to  detect  all  relevant  data.  For  one  thing, 
keyword  searches  work  only  for  text  data,  yet  many  types  of  files,  such  as  images  and  videos,  do 
not  store  data  as  searchable  text.  Moreover,  even  as  to  text  data,  there  may  be  information  properly 
subject  to  seizure  but  that  is  not  captured  by  a  keyword  search  because  the  information  does  not 
contain  the  keywords  being  searched. 
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7 1 .  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
chcumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 
responsive  to  the  wan*ant. 

D.  Return  of  ESI 

72.  .  If  the  Govermnent  detennines  that  the  electronic  devices  are  no  longer  necessary 
to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
FederahRuIe'of  Criminal  Procedure'41  (c)7  the  Government  will  retunirthese-items^upomrequest- 
Computer  data  that  is  encrypted  or  um'eadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instnrmentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 
Subject  Offenses. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  Identijy  the  person  b)!  name  and  address)  )  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  ^ 

New  York,  New  York  1 0065,  and  any  closed  ' 

containers/items  contained  therein.  See  Attachment  D  I 

SEARCH  AND  SEIZURE  WARRANT 

To:  ■  Any  authorized  law  enforcement  officer 

_ An  application  by  a  federal  law  enforcement jifficer  or  an  attorney  for  the  goveimnent  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  Dishict  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location): 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein,  See  Attachment  D 

The  person  or  property  to  be  seai'ched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized): 

See  Attachment  D 

I  fmd  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  wairant  on  or  before  ^  ~  AA*"  _ _ 

(not  to  exceed  14  days) 

in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  propeity 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  propeity  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  wairant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  wairant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USldJ  Initials 

O  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C,  §  2705  (except  for  delay 
of  trial),  and  autliorize  the  officer  executing  this  wairant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Dfor  _ days  (not  to  exceed  30). 

□untn,  the  facts  justifying,  the  later  specific  date  of  _ . 

Date  and  time  issued:  A/  HrrsCy  _ _ 

*  7  Mge  ‘s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 
Printed  name  and  title 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed; 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  m  the  presence  of : 

Inventory  of  the  properly  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  peijury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date;  _  _ 

Executing  officer’s  signahire 


Printed  name  and  title 


ATTACBMENT  D 


I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  Inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

- ^Thedtems-to-be  seized-fi-om  SubiectPremises^T  are  evidence;  fruits,  and  instrumentalities 

of  violations  of  18  U.S.C.  §§  371  (consphacy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(banlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  eampaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  tramfeimmnntCTesUn  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  '^^^^^^^^H.rd/or  entities  associated  with  him. 

c.  Evidence  relatingto  apian,  proposal,  or  agreementto  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  fi'om  Essential  Consultants  or  the  natm'e 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D ,  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  • 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records,  from  January  1, 
2013  to  the  present, 

Cohen 


Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Irnd/or  entities  controlled  by  T 


2017.08.02 


13 


and  any  payments  by  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Eic., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


Ic.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


1, 2012  to  the  present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  accormt  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  fimds  flowing  into  an  accormt;  or  the  pmpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subj  ect  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  hr  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  waiTant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  iuclude; 

1 .  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media^  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  confrgm'ation  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 

controTover,mrownership  of  the  seized  or  copied-computer  deviees-oi-storage  media. - - 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage-  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example; 

•  suiveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cm'sorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
0  ccurrences  of  language  contained  in  such  storage  areas  exist  that  are  hitimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  wiU  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  elecfionically  stored  information  within  the  categories  identified  in  Sections 
II,  A  and  ILB  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fi'om  seized  devices  or  storage  media  if  necessaiy  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additiondly,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedui'es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attoniey-cfient  or  other  applicable  privilege.  When  appropriate,  the  procedm'es  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  firom  the  investigative  team,  in  order  to 
address  potential  privileges . 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  Loews  Regency  Hotel,  540  Park  Avenue, 
Room  1628,  a  Suite  that  Encompasses  Rooms 
1628,  1629,  and  1630  New  York,  New  York 
10065,  and  Any  Closed  Containers/Items 
Contained  Therein 
Reference  No.  2018R00127 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


deposes  and  says: 


I.  Introduction 
A.  Affiant 


1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  On  or  about  April  8,  2018,  the  Honorable  Henry  B.  Pitman,  United  States 
Magistrate  Judge,  issued  a  search  and  seizure  warrant  for  the  premises  known  and  described  as 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein.  The  warrant  and  my  supporting  affidavit  (the 
“Affidavit”)  are  appended  hereto.  The  Affidavit  is  incorporated  herein  by  reference  in  its  entirety 
as  Exhibit  A. 
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3 .  On  or  about  April  9, 20 1 8,  based  upon  a  conversation  with  another  law  enforcement 
agent  who  spoke  to  an  employee  of  Loews  Regency  Hotel,  I  learned  that  Michael  Cohen  is  in  fact 
staying  in  Room  1 628  (in  a  suite  encompassing  rooms  1 628, 1 629,  and  1 630)  (collectively,  “Room 
1628”),  not  Room  1728.  Accordingly,  I  respectfully  submit  the  attached  amended  warrant 
pursuant  to  Rule  41  of  the  Federal  Rules  of  Criminal  Procedure  for  the  following  Subject  Premises: 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  New  York,  New  York  10065,  and  Any 
Closed  Contarners/Items  Contained  Therein  (“Subject  Premises-4”).  For  the  reasons  detailed  in 
the  Affidavit  and  herein,  I  believe  that  there  is  probable  cause  to  believe  that  Subject  Premises-4 
contains  evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §§  1005  (false  bank 
entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank  fraud) 
(collectively,  the  “Bank  Fraud  Offenses”),  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371 
(conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

4.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 
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5.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 
FBI 

Sworn  to  before  me  on 
9th  day  of  April,  2018 


HON.  HENRY  B.  kxMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 


I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  1 6th  floor  of  the  hotel. 

II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

to  be  seizedTfpm  Subject  P7emises-4  are  evidence,  fruits,’ and  instrumentalities' 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  traTTsfe^n^ritajest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^|md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,-  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  by 
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and  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

- — k.— Evidence  relating-to-Cohen-s-role  in  the -Trump-Gampaignj-and-Goordination-or- 

consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  inyolving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include;  ’ 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the.identities  or  locations  of  those  persons  with  access  to, 

control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media.  _ 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

®  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

9  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

9  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


2017.08.02 


4 


Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  ffom  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United  i 
States  of  America  for  a  Search  and  Seizui'e  : 
Warrant  for  the  Premises  Known  and  Described  ; 

New  - 


as  (1)  502  Park  Avenue,! 

York,  New  York  10022,  (2)  Michael  Cohen’s  : 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  i 
^^rk.  New  York  10112,  (3)  Safe  Deposit  Box  #  ; 
^^Located  at  the  TD  Banlc  Branch  at  500  Park  : 
Avenue,  New  York,  New  York  10019,  and  (4)  ; 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  ; 
1728,  New  York,  New  York  10065,  and  Any 
-  Closed-Containers/Items-Contained  Therein,  and  : 
the  Electronic  Devices  Known  and  Described  as  ; 
^^^lAnple  iPhone  with  Phone  Numbeil 
^^^^H|and  (2)  an  Apple  iPhone  with  Phone 
Number^^l^^^^^^l 
Reference  No.  2018R00127 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.; 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  coui'se  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  Eauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 

Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  laiowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  course 
-oD-mv— investigation.— Where__,the__  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3 .  Subject  Premises-1 ,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as; 

a.  Subject  Premises-1  is  Apartment  ^Jlocated  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Parle  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^^Jfloor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below.  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  101 12.  The  building  located  at  30  Rockefeller  Plaza 

*  As  noted  infi'a,  I  have  learned  tliat  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Banlc 
branch  location  at  5  00  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 
maintained  by  TD  Banlc,  I  have  learned  that  the  safety  deposit  box  is  approximately  five  inches  by 
ten  inches-in  size,-and  is  marked,asj30X_^#,  J_The  safety  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxmy  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  onmy 
review  of  emails  obtained  pursuant  to  search  wainants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8,2018.^  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taking  possession  on  Thui'sday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


^  Although  the  quoted  price  contemplated  a  three-month  stay  from  Ja.nuary  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  ai'e  most  lilcely  present.^ 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 

Premises-4, 

4.  .  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices”)  are 

particularly  described  as: 

a.  Subject  Device- 1  is  an  Apple  iPhone  seiwiced  by  AT&T  with  the  telephone  number 
Basedmn-mv_xeyiew_of  records  maintained  by  AT&T,  I  have  learned  that  Subject 

Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  in  the  Southern 
District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subjeet 

Device-2  is  subscribed  to  Miehael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 
District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  onlme,Ilcnowthatthe  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


^  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1 628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  suiveillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  enciypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  inshumentalities  of 
violations  of  18  U.S.C.  §§  1005  (false  bank  entries),  1014  (false  statements  to  a  financial 

-institution),Jl34-3_ (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Bank  Fraud  Offenses”), 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other- 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  seai'ch  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  18, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account^^^^^^J^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1, 2016  and  July  18, 2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8, 2017,  tire  FBI  sought  and  obtained  a  search  warrant 
for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^^^^l^gmail.com  (the 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Wawant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
-warrant  foi^emails-in-the-jCohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 

November  13, 2017  (the  “Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  accoun^^^^^^^^^^^^the  “Cohen  MDCPC  Account”)' sent  or 
received  between  the  opening  ofthe  Cohen  MDCPC  Account'^  andNovember  13, 2017  (the  “Fii'st 
Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBFs  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  Fii'st  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  WaiTant.  On  or  about  March  7, 2018,  the  SCO  provided  the  USAO 


Based  on  my  review  of  this  warrant  and  the  affidavit  in  suppoit  of  it,  I  loiow  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  coxuf  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  fi'om  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
worldng  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 
for  privilege. 

9.  On  or  about  F ebmary  28, 20 1 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 20 1 7  and  Februaiy  28, 2018  (the  “Thhd  Cohen  Gmail  Warrant” 
and  the  “Second  Cohen  MDCPC  Warranf ’).  The  content  produced  pursuant  to  these  wairants  is 

-suhiecTto-atrongoing  review-for privilege  by  an  SONY  filter  team.^  _ 

10.  The  emails  search  wairants  described  above  are  referred  to  eollectively  as  the 
“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  Icnown  as  a  “triggeidlsh,”  to  deteiinine  the  location  of  Subject. 
Device-1  and  Subject  Device-2. 

II.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Tai'get  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banlcs  fi'om  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,2018. 

^  On  or  about  February  28,  2018  and  April  7, 2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  wai-rants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  tlien-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

1 3 .  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banlrs  in  connection  with  a  ti'ansaction  intended  to  relieve  Cohen  of 
approximatelv-$22-millionLin_debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banlcs,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banlcs  from  which  he  was 
seelcing  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  thh’d  party, 

in  connection  wit^^^^^^^|  acquisition  of  the  taxi  medallions  securing  Cohen’s 
debt.  By  malcing  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banlcs  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  exti'amaiital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  tliat  Cohen  made  this  payment  to  Clifford  for  tire  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-ldnd  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
infonmation  obtained  pursuant  to  the  iCloud  Waitant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premises  to  (a)  receive  documents  related  to  the  transaction  intended  to  relieve  Cohen  of  his  taxi 
-medallion  debt-lblrecelve  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  fr-ansaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below,  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electmnic  deviees  eontaining  such  evidence. 
Subject  Premises-3,  as  described  below,  lilcely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  eonnection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 
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devices,  including  Subject  Device- 1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banlcs,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  foifh  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

The  Bank  Fraud  Scheme 

- (i)  Cohen ’s  Statements  to  Sterlins  National  Bank 

16.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  LLCs  controlled  by  him  and 
his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling”)  and 
the  Meh'ose  Credit  Union  (“Mehose”),  secui'ed  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  from  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Mehose,  and  public 
sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee- 1”)  and  two  other 


’  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  number's  associated  with  Subject  Device- 1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among, 
other  things,  the  following: 

a.  Taxi  medallions  ai'e  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  EEC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  fmanced-  by 
loans  from  Capital  One  banlc,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 

-operatoivand  leased-his-medallions_to_a  third_paLtv.  That  thu’d  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 
One. 

b.  In  early  2014,  Cohen  beeame  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  20 14,  Cohen  raised  with  Sterling 
the  prospeet  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borTow  more  money  from  the  then-increase  in  value 
of  the  medallions.  Aecording  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry— as  a  result  of  the  emergence  of  ride-sharing  serviees,  such  as  Uber — taxi  medallion 
loans  were  viewed  by  banlcs  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — -lilce  the  loans  held  by 
Cohen — ^were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
Aeeording  to  Sterling  Employee-1 ,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


^  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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aad  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which- — 
according  to  letters  from  Capital  One  in  Sterling’s  files^ — was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  ofwhich  $14.6  million  was  a  line  of  credit  to  Cohen),  This  allowed 
Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8, 2014,  each  of  Cohen’s  sixteen  taxi  medallion  LLCs  entered  into  loan  agreements 

-and-promissoiv-notesJwith-Steriing  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 
December  8, 2016.  Each  loan  was  signed  by  Michael  orLaui'a  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises- 1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  maldng 
the  medallions  collateral  for  the  notes.-  To  give  Steriing  additional  security,  Michael  and  Laura 
Cohen  signedpersonal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  thek  corporations  to  default  under  the  loan 
agi'cements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  he  mailed  to  Subject  Premises- 1 .  In  total,  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements.  Sterling  transferred  45  percent  of  Cohen’s 
taxi  medallion  debt  to  Mekose.^ 


^  Mekose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit'Union  Administration  (“NCUA”). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Meh’ose,  consistent  with  its  paiticipation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.’°  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  Icnow  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  fi’om  the  medallions  were 
-projectedto  be  positive,-thewalue_Qf  the_collaterairas  estirnated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen — ^who  was  the  dhect  obligor  under  the  guai'antee  agreements — was 
over  $77  million.  An  intei-nal  Sterling  credit  and  risk  rating  analysis  repoit,  dated  October  20, 
20 1 4,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  som'ces,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  lide-shaidng  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose,  I  Icnow  from  records  maintained  by  Sterling  and  an  inteiwiew  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  malcing  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  fi'om  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shoitfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  horn  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen — 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 

Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1,  2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015 — during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email.  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  malce  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
intei-view  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
-  -  again  on  September-28,.2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
Icnow  fi'om  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility— both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banlcs.,^^  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  Icnow  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Mekose  agreed  to  amend  their  loans 
witli  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending 
the  loan  maturity  date  to  December  8, 2017. 

h.  I  Icnow  fi'om  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  who  would  agree  to 

Based  on  my  review  of  property  records,  I  Icnow  that  on  or  about  October  28, 2015,  ai'ound 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence — 
Subject  Premises- 1^ — -as  collateral,  Cohen  transferred  Subject  Premises-1  into  ati’ust. 


2017.08.02 


15 


assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallion  entities  to 
for  the  balance  of  the  loans,  which  at  the  time  was  $21 ,376,000.  I  Icnow  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  inteiwiew  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans- — ^and  because  Sterling  was  unfamiliar  with 

rSteiiing  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  31,2017,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  foi-ward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 

about  February  22,  2017,  Cohen  confirmed  that  he  “agr'eed  to  pay  down  1  million  fi'om  the  loan 
amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Mehose,  Sterling 

wasrequu'edto  secmuMehose’s  agreement  to  participate  in  the  transfer  ofthetaxi  medallion  debt 
from  Cohen  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Meh'ose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2,  2017,  Sterling  Employee- 1  told 

that  Mekose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 
term  sheet  shortly. 

j .  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee-1  emailed  Cohen  to  request  an  "updated  personal  financial  statemenV’  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 20 1 7,  Cohen  emailed  Sterling  Employee- 1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  201 7 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  fi'om  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
the  infoiimation  in  the  statement  came  from  Cohen  and  that  Getzel  had  not  confirmed  its  accui'acy 
—01- completeness — TheMav^2QL7_rinancial  Statement  stated  that  Cohen  had  total  assets  of 
$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such,  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence. 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee- 1  reviewed  the  May  201 7  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  tire  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accumte. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen 
attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


Based  on  my  review  of  Cohen’s  financial  statements,  I  Icnow  that  the  precipitous  decline  in 
assets  from  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  The  term  sheet  included  a  cover  letter  addressed 

to  Cohen  at  Subject  Premises-1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee- 1  sent^^^^^^^^^^id  Cohen  a  copy  of  the 
executed  term  sheet.  According  to  the  term  sheet^^^^^^^^fwould  borrow  $20,000,000 
from  Sterling  and  Mehose,  to  be  seemed  by  the  medallions  that  ^^^^^|vas  to  acquke  fi'om 
Cohen. 

m.  As  part  of  the  agreement,  according  to  the  term  sheet,  $1,265,913  in  principal  (which 
~  is-what-would-reniain-afi;ei-the-$20.000.Q00  payment  on  the  outstanding  loan  balance)  would  be 

repaid  by  Cohen  and  the  two  banlcs,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  wouldpay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  char'ge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  malce  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee-1 ,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement,  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guar’antees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^^^^|ransaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Melrose, 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Mehose’s  regulators  at  NCUA),  hr  August  and  September  2017,  Sterling 
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requked  and  requested  additional  financial  statements  and  tax  returns  for  Cohen 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1.  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 
30, 2017  (the  “September  2017  Financial  Statement”). 

- - Oi— Lil<e4heMav-20L7-EinanciaLStatement.  the  September  2017  Financial  Statement 

included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings),^'' 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  fii'st 


Based  on  iny  review  of  Cohen’s  financial  statements,  I  Icnow  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  ttdrty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whicMwa^considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^^^|;erm  sheet, 
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time,  he  indicated  was  held  by  a  trast).^^  The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  Fi'om  my  paiticipation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements^ — ^i.e.,  in  or  around  September  2017 — Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 

-2-.-Cohen-informed-Sterling.  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  201 7  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  banlc’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-^^^^^^|:ransaction  was  favorable  for  the  banlc 
-  that  is,  that  ^^^^^^|vould  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addi'essed  to  Cohen  at 
Subject  Premises-1 .  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subject  Premises- 1 .  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  Sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
paiticipation  in  an  interview  with  Getzel,  I  loiow  that  in  2015,  Cohen  transferred  his  residence  to 
a  h'ust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohei^^^^^^Jransaction,  Cohen  would  “bring  all 
payments  up  to  date  as  weU  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 2018,  that  at  tlie  closing  of  the  Cohen-^^^^^|ransaction,  Sterling  provide  a  letter- 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-^^^^^^Jransaction,  however,  did  not  close.  On  or  about  Januai-y 

29,  2018,  attorney  emailed  attorneys  for  Sterling  and  stated  that  “at  this  time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  ai-e  not  prepai-ed 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  loiow  that  after  the  Cohen-^^^^^^|leal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  Sterlmg  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  Icnow 
that  Sterlmg  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$  1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-^^^^^^l  transaction.  Sterling  Employee-3  questioned  Cohen  about  the  price 

was  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and^^^^^l  Cohen  denied  that  there  was  any  side  agreement  with^^^^^^| 

t.  On  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signahire 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  Januaiy  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  lai'ger  monthly  interest  payments. 

u.  On  or  about  February  1,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
“[pjayment  of  $  1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $L250m.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 
his  cuiTcnt  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructui'e  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him, 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Meli'ose  Cash  Derived  from  Consulting  Work 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Mekose^^)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  make  monthly  .interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  banlc 
accounts  at  First  Republic  Banlc  (“First  Republic”),  and  then  received  millions  of  dollars  in 
eonsulting^paymentsin  these_acjiounts,jyhich  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
accounts  and  received  these  fiinds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  malce  payments 
on  the  medallion  loans,  ha  these  disclosui'es  to  Sterling^ — and  despite  being  asked  about  these  banlc 
accounts  by  his  accountant — Cohen  misled  the  banlc  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  banlc’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic, 

18.  Specifically,  based  on  my  review  of  documents  and  banlc  records  produced 
pui'suant  to  a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  with  a  First  Republic  sales  manager  (“FirstRepublic  Employee-1”)  and  a  First  Republic 
senior  managing  director  (“First  Repubhc  Employee-2”),  I  have  learned,  among  other  things,  the 
following: 


Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pui'suant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwai'ded  to  Meh^^^^bgt 
Meh'ose  could  malce  a  determination  as  to  whether  to  approve  of  the  Cohen-"^^^^^H 
transaction.  Based  on  my  review  of  reports  of  interviews  wjtj^Uelros^mployees,  I  also  know 
that  Cohen  called  employees  at  Mekose  regarding  the  Cohen^^^^^^Hxansaction. 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  Fhst  Republic’s  Icnow-your- 
customer  records  on  Cohen,  his  primary  physical  address  is  the  addi'ess  for  Subject  Premises- 1 . 

b. .  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  Fh'st  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatoiy  on  the  account.  According  to 
account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subject  Premises-1.  When  Cohen  opened  the  Essential  Consultants  Account,  Fnst  Republic 
Employee-1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-youi- 
customer  questions  about  the  purpose  of  the  account — the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form^® — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income — separate 
ftom  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  pmpose  of  the  account  and  source  of  firnds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive — ^and  does  not 


Certain  financial  institutions  are  requked  to  conduct  such  procedures  pui'suant  to  the  Banlc 
Secrecy  Act  and  its  implementing  regulations.  S'ee  31  U.S.C.  §  5318;31  C.F.R.  §  1020.220. 

First  Republic  Employee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  banlc  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received^ — money  in  connection  with  real  estate  consulting  work;  in  addition,  the 
account  has  received  substantial  payments  fi'om  foreign  sources. 

c.  I  Icnow  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  seiwices.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  Icnow  the 

^following: - - ^ - - - 

i.  Begiiming  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  fi-om  an  entity  called  Columbus  Nova 
LLC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  fiim  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Vhrtor  Vekselberg.  From  Januaiy  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  LLC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  fr'om  Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  International  AG  (“Novartis”). 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  banic  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Begintring  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 
$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10, 2017,  June  9, 2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  ICorea.  The  account  hoider  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  sateliites  to  the  United  States 
Depaitment  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommeitsbank,  a  Kazalchstani  banlc.  The  iisted  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  banlc  named  BTA  Bank,  AO.  A  message 
accompanying  the  wke  payment  indicated  that  the  payment  was  a  “monthiy  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTft  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  orabout  Januaiy  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,1 12.98  in  ftansfers  and  checlcs 
from  the  aforementioned  entities.  As  of  on  or  about  January  10, 2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  addi’ess  for  MDC&A  Account  was  the  address  for  Subject  Premises-1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 
the  balance  in  the  account  as  of  January  2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen 
^never-disclosed  any  okthe-balance-in-the-Essential  Consultants  or  MDC&A  accounts  to  Sterling 
during  the  negotiations  with  respect  to  the^^^^^^^|:ansaction  or  the  subsequent  loan 
refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI,  In  tire  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  1  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 
for  Essential  Consultants  is  the  address  for  Subject  Preraises-2. 

b.  On  or  about  May  8, 20 17,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 
affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
EEC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provided  the  address  for  Subject  Premises- 
2r~In  the~emailrGohen-attaehed-a  doGumentpurporting  to  be  a  “Consulting  Agreement”  between 
BTA  Bank  and  Essential  Consultants  dated  as  of  about  May  8, 20 17.  The  agreement  indicates  that 
Essential  Consultants  had  the  addi'ess  of  Subject  Premises-2,  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  seiwices”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Himdred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $150,000.  On  or 
about  May  1 0, 20 1 7,  Cohen  sent  an  email  to  an  employee  of  BTA  Batilc,  and  attached  to  the  email 
an  invoice  to  BTABanlc  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 
consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consulting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  addi'ess  of  Subject  Premises- 
1 .  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my  review  of  reports  of  inter-views  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  ser-vices  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the  Affordable  Care  Act  in  the  US  and  any  other  issues  mutually  agreeable  to  [Essential 

“Consultants] -and-Novartis.t^ — The-contraet  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundr-ed  Thousand  ($1,200,000)  US  dollar-s,”  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  thatNovartis  retained  Cohen  to  provide  political  consulting  services  and 
to  gain  access  to  relevant  policymalcers  in  the  Trump  Administration. 

e.  In  or  about  Februar-y  2017,  Cohen  began  negotiating  the  ter-ms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  Mareh  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squhe  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
sh'ategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squhe 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separ-ate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squhe  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 
clients.” 


2017.08.02 


29 


20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
interview  with  Getzel,  and  my  review  of  notes  and  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  Subject  Premises-2.  At  the 
-meeting^Cohen-told  Getzel,- in  sum-andsubstance.  that  he  had  set  up  a  law  practice  called  Michael 

D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  LLC,  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annuahy. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  prepaiing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6, 2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30, 2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  di'aft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  liabilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Accoimt: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 


2017.08.02 


30 


POC  [j/c]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6, 2017,  Cohen  called  Getzel  by  telephone— which  is  reflected 
on  toll  records  for  Cohen’s  cellphone- — ^and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[IJooks  good  to  me.”  Cohen  never  directed 
GeSencTmalce  anvnehanges  -to  his  cash  position ^as-listed  _ in Jhe  September  2017  Financial 
Statement.  In  a  letter  dated  October  6, 2017,  addi'essed  to  Getzel,  Cohen  stated,  “I  have  reviewed 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  fum.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterling  in 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen, 

21.  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  fiom  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  Icnowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
Icnowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  dui'ing  the 
negotiations,  particulaidy  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  His  Available  Cash 

22.  In  addition  to  withliolding  the  existence  of  his  Essential  Consultants  income  from 
Sterling  and  Meh'ose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  Icnow  from  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30, 2018,  in  a 
•telephone  call  with  Sterling  Employee-3,  and  on  Februai7  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  banlc  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017. 
Additionally,  as  of  Febmaiy  1,  2018,  Cohen  had  approximately  $6,000,000  in  cash  and  cash 
equivatentsrSpecificaIlv.~frommv-review  of  the  account  schedule  and  banlrrecptds.  I  have  learned 
the  following; 

a.  Cohen  has  three  eheelcing  and/or  savings  aoeounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
aeeount,  and  $1,262,982.29  in  total  in  the  three  aeeounts  at  Capital  One  Bank.  As  of  February  1, 
2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  aeeounts. 

b.  Cohen  has  three  aeeounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  eash  and  eash  equivalents  in  those  three  aeeounts  was  $1,270,600.41. 
As  ofFebnrary  1, 2018,  Cohen  had  $  1 ,284.996. 1 3  in  these  accounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689. 1 8  in  an  account  at  Signatoe  Banlc. 
As  of  February  1,2018,  Cohen  had  $261,517.55  in  this  aeeount. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  ehecking  aeeounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic,  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931,39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Banlc — one  in  his  name  and  one  held  jointly  with  his 
wife,  Cohen  also  has  a  safety  deposit  box  at  TD  Bank— Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  1 3, 201 7  in  the  names  of  Michael  and  Laura  Cohen. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $4,713,935.08  in  his  accounts 
-at-Capital-One  Banlt,-City-National  Banlc,  Signature  Banlc,  Sterling  Bank,  Bethpage  Credit  Union, 

First  Republic,  and  Morgan  Stanley.  As  of  Febmaiy  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Banlc,  City  National  Banlc,  Signature  Banlc,  First  Republic,  and  Morgan 
Stanley. 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Mekose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  I'eports  of  interviews 
with  Sterling  Employee- 1  and  two  Mekose  employees,  it  is  my  understanding  that  that  Sterling 
and  Mekose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
those  loans 

Based  on  my  review  of  the  account  schedules  described  above,  I  Icnow  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Bank  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Banlc  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 


24,  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  Icnow  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 
interest  income  in  connection  with  that  loan.  But,  from  my  review  of  a  summaiy  of  banlc  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  propeidy  records  and 
documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following; 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  Mai'ch  12, 

Cohen  agreed  to  approximately 

$2,000,000.^'^  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  anc^^^^^famended  the  promissory  note,  and  resteuctured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  seemed  by^^^^^Jrpartment  in  Sunny  Isles  Beach,  Florida.  On 
or  about  April  8,  2015,  Cohen  and^^^^^  estated  the  promissory  note  to  increase  the  principal 
amount  to  $6,000,000.^* 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  prrr'suant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 
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I  learned  from  Getzel  thall 


The  note  states  that  the  loan  is  to| 
jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to| 
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I,  husband  and  wife, 
lerein. 


promissoiy  note,  Cohen’s  loan  an  interest-only  loan,  and  that  tlie  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  Icnow  that  the  amended  and 
restated  promissoiy  note  includes  a  schedule  of  payments  that  requhe  pay  Cohen 

approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 
requires  tha1^^^^^|epay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 
of  the  amended  and  restated  promissoiy  note,^^^^^|ias  made  monthly  payments  of 
appfbxihaatelT$6T.250~since-April-20T5r-SpeeifiGallv.-based  on  mv  review  of  records  mamtained 


by  Capital  One  Banlc,  I  have  learned  that  from  April  20 1 5  to  October  20 1 5,  Cohen  received  checks 


fi'om  an  entity  called  I 


totaling  $61,250  per  month,  which  he 


deposited  into  his  personal  banlc  account  at  Capital  One  Banlc.^  It  appears  from  my  review  of  banlc 


records  and  public  sources  thatl 


Is  the  owner  of  I 


From  my  review  of  records,  maintained  by  Capital  One  Banlc,  I  have  also  learned  that  since  October 


2015,  Cohen  has  received  checlcs  from  an  entity  called  J 


[totaling 


$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Banlc.  It 


appears  from  my  review  of  banlc  records  and  public  soui'ces  that| 


is  also  the  owner  of  j 


In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 


in  interest  payments  fron^^^^^^l 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  20 1 5  and  2016  tax  returns  obtained  via  subpoena  and  from  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  leai'ned  that  Cohen  did 


In  April  2015,  Coha^^^^d  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but^^^^^often  made  the  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  fi.'or^^^^^|:o  Steiding  or  Mehose,  or  list  it 
on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel— his  accountant— about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing^^^^^| taxes  in  2017.^^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 
Sterling  and  Mehose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  information  relating  to  the  interest  income  he  is  receiving  from  in  order  to 

secui'e  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 


Cohen  Had  a  Side  Agreement  With 

26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 
interest  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agi'eement  he 
had  negotiated  with^^^^^^^t  appeal's  tha^^^^^^^^igreed  to  pay  an  above-market  price 
for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  approximately 

$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee- 1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  leai’ned,  among  other  things,  the  following: 

a.  Oh  or  about  September  5, 2017,  an  executed  term  sheet  was  circulated  by  Sterling 
Employee-1  to  Cohen  and^^^^^|  The  term  sheet  listed  Cohen’s  address  as  the  addr-ess  for 
Subject  Premises-1.  According  to  the  term  sheet,  would  borrow  $20,000,000 

fi'om  Sterling  and  Melrose,  to  be  secured  by  the  medallions  tha^^^^^^|vas  to  acquire  fi’om 


Accordingly,  this  interest  income — ^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns- — is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  paid,  regarding  the  proposed  side 
payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
,  entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 

The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and^^^^^^f 
in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  then  banlc  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfoliifdf  th^l3^ntities~bv  $5QQ;00Q  and-amash  paymentfo  the__Buver  of  $3,800,000,”^'^ 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

payment  of  $3,800,000  but  Getzel  did  not  Icnow  where  Cohen  was  going  to  obtain 

$3,800,000  to  pay^^^^^^l  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 
cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Meh’ose,  the  banlc 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Mehose),  I  have  seen  no  evidence  that  Sterling,  Mehose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^^^^^was  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  USAO  and  FBI  ai*e  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 

The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $1 30,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  exti'amaiital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affak.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  ft'om  making  public  statements  about  the  rumored  affak  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

30.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.  com  that  Trump  had  had  an  extramarital  affak  with  Clifford,  an  adult  fdm  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occxu’red  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  aiticles, 

b.  Specifically,  on  or  about  October  1 1, 2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  aiticle 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  El  News  that  “[t]he  totally  untiue  and  ridiculous  story  . .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit  .  .  .  [and]  Mi\  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  larmched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee,  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Tmmp  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Tramp  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Tramp’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Tramp  refen-ed  to  women  in  what  the  article  described  as  “vulgar 

l:efms”~ura'2005  conversation  with-Billv-Bush,whoJwas_thenjdie  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Tramp  appeared  in  a  video  in  which  he  stated,  among  other 
things,  ‘T’ve  said  and  done  things  I  regi-et  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  lorows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  Icnow  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33,  Based  on  my  review  of  public  sources,  including  an  aiticle  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  willi  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author- 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disciose  her  accusation.  As  Cohen  summarized 
in  a  201 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  201 6, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  20 1 1 
stoiy  of  an  alleged  affair  between  Mr,  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the'  iCIoud  Wan-ant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’ s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer, Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content-  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call,  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  ceitain  telephone  numbers  to  ceilain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pui'suant  to  the  iCloud  WaiTant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  repoits,  a  personal 
friend  of  Trump.-  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

I  believe  that  Tramp  joined  the  call  between  Cohen  and  Hicks  based  on  ray  review  of  toll 
records.  Specifically,  I  Icnow  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hiclcs 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Tramp  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hides,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  montb  prior  to  this  date  —  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
"David  PeckeI‘  (asmoted~aboverthe-President  ofiAmericanMedia  Inc,,  or  AMT)  and  they  connected 

for  thhty  seconds.  Approximately  four'  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  dian  a  minute.  Three  minutes  after  ending  his  eall  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
thi'ee  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eiglft  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four’  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  fi-om  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keitlr  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9, 2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thanlcyou,”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  walce, 
please  call  my  cell.” 

f.  The  following  day,  on  October  10, 2016,  at  1 0:58  a.m.,  Howard  sent  atext  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  offlbrtunitw  Spoke"  to~the-cl  ient-this- AM-  and  -they’re  confi  rmed  to  proceed  with  the 
opportunity.  Thanlcs.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal — In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referi'ing  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^* 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Waitants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
ag'eement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The' purpose  of  tire  document. 

As  set  foi'th  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  witlr  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “tme  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is'’ unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  fi’om  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pumuant  to  the  iCloud  Wairant  and  Cohen  Email  Warrants,  records  maintained  by  Fust 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following; 

a.  On  the  morning  of  October  1 3, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:' “I  need  to  taUc  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  baek.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  leai'ned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  First  Republic  Employee- 
2.  The  email  attaehed  documents  from  the  Seeretaiy  of  State  of  Delawai'e  indicating  tliat  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howax'd  he  had  formed  recently  after  Howai'd  said  Davidson  would  “do  it,”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 
in  the  name  of  “Resolution  Consultants”  opened  immediately,  and  that  he  did  not  want  an  address 
on  the^cHeclcsAwittem  out  oftthe  account— Latei-that  day,-another_emplpyee  at  Ffrst  Republic 
emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’ s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 
account  was  never  opened. 

c.  On  October  1 7, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progr'essing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  Icnow  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  thr-eatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  paif,  “Please  be  advised  that  my  client  deems  her 
settlement  agi'eement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically; 

i.  ^  At-4:4-3-p.m.'~Howard-sent-Cohen_  a_text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Ai’e  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howai-d’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extomaiital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  tire  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howai'd,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later;  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later;  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  naftu'e  of  the  investigation  to  this  date,  the  US  AO  has  not  requested 
documents  fi’om  the  Trump  Organization  or  Davidson,  and  tlrus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howai'd  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  ai-ticle  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Tnunp  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 

- 37.- - Qn-or-about-Qetober  25.^2016.  the  communications  between  Cohen,  Davidson, 

Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Wairants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’ s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
horn*  but  appeal'  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7: 1 1  p.m.,  they  spoke  for  another  two  minutes. 

b .  The  next  morning,  on  or  about  October  26, 20 1 6,  at  8 :26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  thi'ee  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 : 04  a.m. — less  than  thuty  minutes  after  spealcing  with  Tinmp — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  tlie  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Tmmp  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  st-eet  to  open  the  account,  so  First  Republic  Employee-2  called  First 
— Republic-Empleyee-f^a-preferred,banker-at  that  branch,  assist  Cohen.  At  11:00  a.m..  First 
Republic  Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
Republic  Employee-1,  that  ai'oundthe  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — 
on  the  same  floor  as  the  Trump  Organization — ^and  went  thi'ough  account  opening  questions, 
including  Icnow  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-youi- 
customer  questions  about  the  purpose  of  the  account — the  answers  to  which  First  Republic 
Employee-1  entered  into  a  foim^ — -Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based,  on  my  review  of  records  obtained  horn  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Banlc. 

f  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Followingthe  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  coimected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connectedToTabouftMity  secondsr-At"7:06-pTm.Tr  Gohemcalled-Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  ‘He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sotted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  yoiu  Gmail  for  email  Rom  my  private  account.”  In  an  email  sent  at  8:23  p.m,  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  retoned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thmrsday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  thiirlc.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  tluee 
minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $1 30,000 — with  the 
funds  intended  for  Clifford- — ^for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  witli  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  banlc  records,  and  information  obtained  pursuant  to  the  iCloud  WaiTant  and  Cohen 
Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  Idndly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensme  that  all 
paperwork  contaius  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  horn  you  later.” 

b.  wkt^approxhnately-4 0: 0 l-a,m., -according jfp  records  provided^y  First  Republic 
Banlc,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter, 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  fi'om  9:47  a.m.,  stating;  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbru'sed  unless  &  untU  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  viaFedEx.  Only  after  you  receive  FedEx 
will  I  disbm'se.  Fan?” 

d.  At  10:50.a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  whe  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  prnsuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  Icnow  the  following: 
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a.  On  October  28,  20 1 6,  at  1 1  ;48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK,  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanlced  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  ‘T 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  pavidson]  says 

HvWare^dodT”  Cohemthen^responded-‘-QI‘C’-to-Howard-and-“Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howai'd  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howai'd  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thanlc  you”  to  Howai'd  and  “Thanlcs 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosui'e  agi'eement  when  he  told  Cohen  that  he  would 
receive  a  paclcage. 

d.  Based  on  my  review  of  comt  filings  that  became  public  in  20 1 8, 1  have  leai'ned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pm'suant  to  which  “Peterson” 
agi-eed  not  to  disclose  certain  “confidential  information  pertaining  to  pennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  "EC, 
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LLC.”  The  agreement  stated  that  tlie  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transfeiTed  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  pictoe  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m,,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  inteiviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  appmximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4, 2016,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four*  days  before  the  presidential  election,  the  Wall  Sti'eet  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  fi'om  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bur-y  her  story.  McDougal,  lilce  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pm-suant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howai-d 

^texkmessage-with-a-sereenshoCof  an-emaiLfoiwarded  to  him  bv  another  Trump  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Sti'eet  JoruTial  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howai'd  and  Davidson.  Indeed,  at 
approximately  7:33  p.m,,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded;  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  "She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text;  “Let’s  letthe  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  refeiaing  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m,  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance,”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referimg  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howar'd  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  neardy  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Sti'eet  Journal  arficle  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  horn",  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  tmction.”  Hicks  responded,  “Same.  Keep  praying! !  It’s  worldng!” 
Cohen  wrote  bade,  "Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statemeat  by  Storm  denying  everything  and  contodictingthe  other  porn  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Tmmp,  but  was  unnecessary  at  that 
time,  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning,  Pecker 
spoke  to  Trump. 

41.  On  or  abdutNo^mber8r20i67Trump-wen  thnelection  for  PresidentoftheUnited 

States. 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  governrnent 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  malting  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following; 

a,  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  di'afts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  di'aft  of  that  statement  to  an 

individual  who  appeal's  to  be  writing  a  book  on  Cohen’s  behalf; 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pm'suing  the  2011  story  of  an 
alleged  affair  between  Mi'.  Tramp  and  Ms.  Clifford,  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  laiew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that just  because  something  is  false  doesn ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 


2017.08.02 


55 


occur.  I ,  negotiated  a  non-disclosui‘e  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delawai'e  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  thii'd  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regai'ding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear’,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  aclcnowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  [“...the  2011 
story...''),  but  that  Cohen  was  motivated  to  “keep  the  story  from  brealdng”  again  in  October  2016. 

b.  On  or  about  February  13, 2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contr’ibution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  awar’e  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar’ 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14, 2018,  Cohen  was  aslced  by  The  New  York  Times  whether 
Trump  had  reimbm’sed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  hr  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that;  “In  a  private  transaction  in  2016, 1  used  my  o’wh  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  'with  Ms.  ClifPoi’d,  and  neither  reimbursed  me  for  the  payment,  either 
dhectly  or  mdh’ectly.” 

43 .  On  or  about  March  9, 201 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  talcen 
from  my  home  equity  line  and  transferr’ed  internally  to  my  LLC  account  in  the  same  bank.” 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  making  an  in-kind  contribution 
to  Trump  or  the  Trump  campaign  in  the  foi*m  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $  130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurTed  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 

-Clifford-existed  since  20-1-1— Tn-addition._the  commrmication  records  set  forth  above  malce  evident 
that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45 .  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Email  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  in 
furtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises- 1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  hr  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device- 1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  Fust,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1.  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises-1.  From  my  review  of 
Cohen’s  tax  retmms,  I  loiow  he  lists  his  primary  residence  as  Subject  Premises-1.  Additionally, 
from  mvreviewofhmails  produced- pursuanfto  the  Cohen  Email-War‘rants._I  know  that  Cohen 
routinely  refers  to  Subject  Premises-1  as  his  home.  For  example,  on  or  about  September  28, 2017 
and,  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  Icnow  from  my  review  of  emails  that  Cohen  receives  package  deUveiy 
notifications  that  list  Cohen’s  addi'ess  as  the  addinss  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  addi-ess  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  18(d).  The  consulting  agreement  between  Essential  Consultants 

and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra  \l9{c). 

Al.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  lilcely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  fi'om  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  foUowmg: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 
I  Icnow  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ov/nership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion  LLCs,  the  revenue  that  those  medallions  generate,  and  the 
transaction  with  Sterling  in  20 1 4  to  re-finance  the  medallion  loans  that  were  then  with  Capital  One 
Banlc. 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  Icnow  that  Sterling 
addressed  documents  relating  to  thi^^^^^^^^xansaction  and  Cohen’s  attempts  to  modify  the 
terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance,  Sterling  addressed  the 
transaction  term  sheet,  see  supra  ^  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  Tf 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  ^^^^^|transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 
records — ^such  as  records  relating  to  a  payment  from  Cohen  to  ^^^^^^^|vvere  concealed  from 
Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  ai'e  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  loiowledge 
of  the  documents. 

c.  From  my  review  of  records  mamtained  by  Fhst  Republic,  I  Icnow  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  1 8(b),  18(e).  Accorduigly,  it  is  lUcely  that  Subject 
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Premises-  !  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  banlc  statements,  documents  provided 
as  part  of  the  Icnow-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checlcs.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-I  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 
existence  of  funds  in  accounts. 

dr^Basedlih iny  revievrof  records  maintained  by-  CapitaLQne.B_ank,_TD  Banlc,  Morgan 
Stanley,  City  National  Bank,  Signatui'e  Banlc,  and  Bethpage  Credit  Union,  I  Icnow  that  Cohen 
provided  the  address  for  Subject  Premises-!  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-!  contains  records  relating  to 
these  accounts,  including,  among  other  things,  banlc  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-!  'will  be  relevant  to,  among  other  things,  Cohen’s 
ownership  of  the  accounts  and  his  Icnowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  banlc  accounts  or  assets  that  were 
not  disclosed  to  Sterling  and  are  not  presently  Icnown  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  see  supra  ^  !  6(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities, The  value  of  these  investments 
was  omitted  horn  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 

Based  on  my  participation  in  an  inteiwiew  with  Sterling  Employee-3,  I  have  learned  that 
Cohen  told  Sterling  Employeer3  that  the.  reference  to  “investments  in  overseas  entities”  on  his 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  future  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Premises-l  as  the  mailing  address  for  bank  records,  there  is  probable 
cause  to  believe  drat  aceount  statements  for  unlcnown  bank  accounts  or  assets  eoneealed  fram 
Sterling  are  lilcely  to  be  found  in  Subject  Premises-1. 

f.  Based  on  my  review  of  records  maintained,  by  AT&T  and  produced  pursuant  to  the 
CohenEmail  Waii'ants,  Iknowthatthe  address  Cohen  provided  to  AT&T  for  Essential  Consultants 
is  the  address  for  Subject  Premises-1,  See  supra  ^  19(c).  Therefore,  there  is  probable  cause  to 
believe  that  Subject  Pmmisek- l~Wvill  contain  evidence- concerning-  the_Qpgratign  of  Essential 
Consultants  or  money  that  Cohen  received,  through  Essential  Consultants,  from  AT&T. 
Additionally,  beeause  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  eontain  records  of  other  consulting  arrangements  that  Cohen,  through  Essential 
Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  Getzet’s  accounting  firm,  and  emails 
produced  piu'suant  to  the  Cohen  Email  Warrants,  I  have  learned  that  Getzel’s  accounting  firm  sent 
documents  to  Subjeet  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  returns.  See  supra  *[[  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  Getzel’s  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention,  Accordingly, 
Cohen’s  tax  records  are  lilcely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  bade  records  andpublicly-available  documents,  I  Icnow  that 
Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  Icnow  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Pretnises-1.  Accordingly,  Subject 
Premises- 1  is  lilcely  to  contain  evidence  of  tlie  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 
pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pm'suant  to  the  Cohen  Email  W arrants  and 
iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
MacBook  Pro  to  access  his  iCloud  account.  Based  on  my  review  of  location  records  provided  by 
Apple  pursuant-to-the-iCloud- W arrant,  J-know_that_electronic  devices  linlced  to  Cohen  ’  s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 
discussed  below  are  lilcely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 
understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
horn  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  conrtactor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  conhactor  to  ‘Tack 
&  Remove  all  items  &  furnishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  beheve  tliat  the 
construction  -  to  the  extent  it  is  still  ongoing  —  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.^* 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agr'eement”  between  Squke  Patton  Boggs  and  Cohen, 
and  my  review  of  the  press  release  on  Squire  Patton  Boggs’s  website,  I  lorow  that  Cohen  has  an 
-offree-at-Subject  Premisesr2._&e..?t<iG>gaJ11_18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement  with  the  law  firm,  he  has  “dedicated  and  segregated  office  space”  in  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  ^  19(e).  Additionally,  I  laiow  that  under  the  terms  of  the  agr'eement,  Cohen  agreed  to 
“ar-range  for  [his]  own  computer  serwer  system  that  is  not  connected  to  [Squne  Patton  Boggs’s] 
computer  network  system.”  I  loiow  from  my  parficipation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  know  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the,  signature  block 

As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  shoif-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  taken  some  evidence  from 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  nature  of  Cohen’s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  talcing  notes),  I  know  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  Icnow  from  an  article  in  Vanity  Fair 
pubhshed  on  or  about  Febraaiy  14, 2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  Febmaiy  2018. 

49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  lilcely  to  contain 
-instiumentalities^^evidence,  and  fruitsmlthe_Sjibiect  Offenses,  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  Icnow  the  following; 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  201 8  about  a  modification  to  his.  existing,  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  tire  address  for  Subject  Premises-2.  See  supra  ^  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b,  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
Icnow  that  the  address  Cohen  provided  to  EAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  See  supra  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  an-angement.  Additionally,  based  on  my  review  of 
emails  sent  in  201 8  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  arrangements  thi'ough  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  arrangements  that  Cohen  has  with 
other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  GetzePs  accounting  firm,  and  emails 
produced  pursuant  to  the  Cohen  Email  Warrants,  as  well  as  my  participation  in  an  interview  with 
Getzel,  I  have  learhedlhafGetzef  visited-SubieetrPremises-2  to  meetwith  Cohen  about  his  taxes^ 
See  supra  If  20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banlcs.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conveixation  with  Getzel,  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regai'ding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 
and  information  regai'ding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  Imow  that  Cohen  maintains 
a  computer  in  Subject  Preniises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  I'egister  to  Google,  it  appears  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 
,  Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business — ^such  as  contracts  with  clients 
and  records  of  payments — at  the  business’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 
will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 

instrumentalities,  evidence,  and  fiuits  of  the  Subject  Offenses.  Inpaiticulai" 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 
20 1 7,  as  Cohen  was  receiving  substantial  income  from  consulting  work — ^which  he  did  not  disclose 
to  Sterling — •Coheirdpened  the” safety^deposit-  box  at-TD-Banlc.-whicluis  Subject  Premises-3 .  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Banlc, 
there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  lilcely  did  not  disclose  to 
Sterling.  Indeed,  based  on  my  training  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-3  will  contain  evidence  of  the  Banlc  Fraud  Offenses. 

b,  In  addition,  based  on  my  review  of  records  produced  by  TD  Banlc,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10, 2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5 :39  on  that  date.^^  Based  on  my  review  of  toll  records,  I  Icnow  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  —  approximately  45  minutes  later  - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  tlmee  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 


The  entry  in  die  banlc’s  log  book  does  not  specify  whether  this  is  A.M.  or  P.M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  banlc  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  Febmary  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’ s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  ar'ormd 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’s 
client  —  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 
Campaign  Finance  Offenses,  such  as  docrunents  relevant  to  the  Cohen’s  dealing  with  Keith 
Davidson  and  the  paythehTtirCliffordrincluding-doeuments  ot-evidence  that  Cohen  did  not  want 
to  leave  in  his  apartment  where  consftuction  workers  would  be  present.^^ 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warnants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premrses- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 
inshTimentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following: 

a.  As  described  above,  it  appear's  that  Cohen  moved  to  Subject  Preraises-4  on  or  about 
February  1,  2018,  at  which  time  numeruus  media  reports  about  Cohen’s  involvement  in  tire 
payment  to  Clifford  were  being  published.  See  supra  Iff  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  See  supra  ff  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  hhn 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  cormection  with  these  statements. 


As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  large  volume  of  hard  copy  docrunents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
F  or  example,  on  January  3  0, 20 1 8,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restiucturing,  and  on  Febiuaiy  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1 .25  million  in  cash.  See  supra 

1 6(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoing  negotiations  with  Sterling  with  him  to  Subject  Premises-4,  in  order  to  reference  and 
consult  them  in  connection  witlf  theseTiegotiations^ - - - - - - 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  IPad  Mini, 
and  a  MacBookPro  to  access  his  iCloud  account,  and  these  electronic  devices  linlced  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  —  Cohens’  permanent  rfcsidence  -  to  place 
telephone  calls  and  backup  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’ s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  Icnow  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  poifable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordingly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
elechonic  devices,  including  Subject  Device- 1,  Subject  Device-2,  and/or  certain  Apple  products, 
that  for  the  reasons  discussed  herein  are  lilcely  to  contain  evidence  of  the  Subject  Offenses, 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  Icnow  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  beheve  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 


2017.08.02 


68 


the  Essential  Consultants  Aeeount,  with  his  accountant  regai-ding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  cmrently  in  Subject  Premises-4,  it  is 
unlmown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrant  sought  herein  are  executed.  If  Cohen  is  within  Subject  Premises-4  at  that  moment,  Subject 
Device-1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 
If  Cohen  is  not  within  Subject  Premises-4  at  that  moment,  the  devices  will  likely  be  on  his  person, 
wherever  he  is  loeated-(whiGh3-based  on  locatiomdata  fonSubiect  Device- 1  and  Subject  De^ce-2 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seeks  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 
warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 
Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  likely  to  contain 
evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device- 1  and  Subject  Device-2  ai'e  themselves  electronic  devices  that  are  lilcely  to  contain 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similariy,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fhiits,  and  instrumentalities  of  the 
Subject  Offenses  for  the  following  reasons: 

a.  As  described  thiuughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
reeeive  eommunications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  been  obtained  via  subpoenas  and  search  warrants,  I  Imow  fi'om  my  training  and  experience 
“ tKarihdividuals"can  and  do- delete- emails-ffomriheiiL  Internet JjasedJnboxes  but  retain  copies  of 
those  emails  on  then  hal'd  drives.  I  also  Icnow  tliat  individuals  often  have  multiple  email  accounts, 
some  of  wliieh  may  not  be  Icnown  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  fi’om  my  involvement 
in  this  investigation,  I  loiow  that  Cohen  had  an  email  account  with  the  Tiump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  lilcely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Preiriises-4. 

b.  Additionally,  Subject  Premises-1 ,  Subject  Premise-2  and  Subject  Premises-4  IDcely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  fi'om  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  theft 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (sueh 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  lilcely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  electronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agi'eements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 
among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  Icnow  fi'om  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 
WaiTants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  elecfonic  notices 
concerning  financial  ti-ansactions  and,  on  occasion,  save  records  of  their  financial  transactions  to 
their  devices.  Accordingly,  there  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 
contain  evidence  of  bahkitig^tivily,includingrthe  existence  of  banlcaccounts  or  assets  that  Cohen 
did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  loiow  that  Cohen 
communieates  using  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust,  I  Icnow  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  eause  to  believe  that  Cohen’s  cellphones  -  the  Subjeet  Devices  -  will  contain  encrypted 
messages  that  ai’e  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experienee,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  eommunieate  with  eo-conspirators,  keep  financial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  eomputers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  “chats”  with 
co-conspirators;  email  coivespondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  banlc  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  ti'aining  and  experience,  I  also  Icnow  that,  where  computers  ai'e  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occurred.  This  is  typically  true  because: 

•  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

•  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted”  on  a  home 
computer,  the  data  contained  in  the  file  does  not  actually  disappear,  but  instead  remains 
on  the  hard  drive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  cannot  be 

- stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  the  Internet 

ai'e  generally  downloadeTinfdWfemporaiy  rnternetdirectoiy  or— cache^^whichis-only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 
pages.  Thus,  the  ability  to  retrieve  fi-om  a  hard  drive  or  other  electronic  storage  media 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular'  user’s 
operating  system,  storage  capacity,  and  computer  habits. 

•  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition,  users  often 
keep  backups  of  their-  data  on  electronic  storage  media  such  as  thumb  di'ives,  flash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electr'onic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  ther-e  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fi-uits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Section  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 
the  proposed  wai'rants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 
Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
correspondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  tc^^^^^^^^^|and/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

e.  Evidence  I'elating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  natui'e  and  purpose  of  payments  made  to  or  fl'om  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohemoi'^ahyEtherindividuals  in  conneetion-with  EssentialJEonsuItants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 
and^^^^^^^^^^md  any  payments  by^^^^^|  Cohen. 

i.  Evidence  relatmg  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Kai'en  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc,, 
David  fecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Kai'en  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

m.  Evidence  of  communications  with  Donald  Tramp  and/or  agents  or  associates  of  the 

Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’ sTelatidnship  hr  the  run  upto-the-eleetionr _ _ _ 

n.  Evidence  relating  to  any  reimbui'sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

0.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffi'ey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 
III.  Procedures  for  Searching  ESI 

A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  41(e)(2)(B)  provides  that  a  warrant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  .  .  ,  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  eomputer  deviees  and  storage  media  and  transpoif 
them  to  an  appropriate  law  enforeement  facility  for  review.  This  is  typically  necessary  for  a  number 
of  reasons: 


•  Fimt,  the  volume  of  data  on  eomputer  deviees  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

•  Second,  because  computer  data  is  partieularly  vulnerable  to  inadvertent  or  intentional 
modification  or  destraction,  computer  deviees  are  ideally  examined  in  a  controlled 

_ environment,  sueh  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 

specialized  softwafe7 cairmalceT:^ forensic-eopv-of-the^torage^media_that  can  be 
subsequently  reviewed  in  a  manner  that  does  not  ehange  the  underlying  data. 

•  Thud,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  teclmical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  from  a  computer 
device,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
feaftues  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  time  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58,  As  discussed  herein.  Squire  Patton  Boggs  is  a  fiinctioning  law  firm  that  conducts 
legitimate  business  um'elated  to  Cohen’s  eommission  of  the  Subject  Offenses.  Subjeet  Premises- 
2  is  an  offiee  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  exeeute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  persoimel  wiU  attempt  to  investigate  on 
the  scene  of  what  eomputers  or  storage  media,  if  any,  must  be  seized  or  eopied,  and  what  eomputers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  persoimel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  detemiine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen,  While,  based  on  the 
foregoing,  it  does  not  appeal'  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preser've  the  evidence,  the  Government  will  returu  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 
persoimel  involved  in  the  investigation,  including  attorneys  for  the  Goverrrment,  collect  evidence 
in  a  maimer  reasonably  designedto^'btect  airy  attoruej^clienf  or^other  applicable-privilege,^  When^ 
appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate  and  apart  from 
the  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subj ect  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  from  my  training  and  experience,  as  well  as  fium  information  found  in 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingerprint”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  Icnow  tlrat  the  Apple  iPhone  X  offers 
its  users  the  ability  to  uirlock  the  device  via  the  use  of  facial  recognition  (through  infrar-ed  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 
called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  imlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fiugerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device’s  contents. 

63.  In  some  ch-cumstances7Tduclf  ID~or  F aceTD  cannot- bnused  to  unlock ajdevice  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
cftcumstances  include:  (1)  when  the  device  has  just  been  turned  on  or  restarted;  (2)  when  more 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  horn's;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  imlock  the  device 
via  Touch  ID  or  Face  ID  ai'e  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  known 
to  law  enforcement.  Thus,  it  will  likely  be  necessai-y  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  fi'ont  of  the  user’s  face  to 

I 

activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  wai'rant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  fi'ont  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otherwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingerprints  are  among  those  that  31*6  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  Icnow  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 
In  the  event  that  law  enforcement  is  unable  to  unlock  the  Subject  Devices  as  described  above 
within  the  five  attempts  permitted  by  Touch  IDrthiswvilhsimply  result  inrthe-device  requiring  the 
entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 
materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requnes  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 
available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court;  authorize  law  enforcement  to  press 
the  fingers  (including  thumbs)  of  Cohen  to  the  Toueh  ID  sensors  the  Subjeet  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subjeet 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 


69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceediags,  attorneys  for  the  goveitiment,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
control)  will  review  the  ESI  contained  therein  for  mfoimation  responsive  to  the  waiTant. 

IQ.  Inmonducting-this  review^law-enforcement  personnel  may  useyai'ious  techniques 


to  deteimine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 
techniques  may  include,  for  example: 

•  suiveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
loolcing  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  determine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance); 

•  “scanning”  storage  ai'eas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

•  performing  electronic  keyword  searches  through  all  electronic  stomge  areas  to 
determine  the  existence  and  location  of  data  potentially  related  to  the  subject  matter  of 
the  investigation^'^;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Keyword  searches  alone  are  typically  inadequate  to  detect  all  relevant  data.  For  one  thing, 
keyword  searches  work  only  for  text  data,  yet  many  types  of  files,  such  as  images  and  videos,  do 
not  store  data  as  searohable  text.  Moreover,  even  as  to  text  data,  there  may  be  information  properly 
subject  to  seizure  but  that  is  not  captured  by  a  ke3nvord  searoh  because  the  information  does  not 
contain  the  keywords  being  searched. 
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7 1 .  Law  enforcement  personnel  will  malce  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
chcumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 
.  responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  If  the  Government  determines  that  the  electronic  devices  ai'e  no  longer  necessary 
to  retrieve  and  presei*ve  the  data,  and  the  deviceslEeinselves  ai'e  not  subject-to  seiziu'upursuantfo- 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfiilly  possessed,  or  (v)  evidence  of  the 
Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  tliis  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectftilly 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Corn!  orders  otherwise. 


Special  Agent 
FBI 


Sworn  to  before  me  on 
8th  day  of  April,  2018 


UMTED  STATES  MAGISTRATE  JUDGE 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Wairatit 


United  States  District  Court 

•  for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728, 
New  York,  New  York  10065,  and  any  dosed 
containers/items  contained  therein.  See  Attachment  D 


) 

) 

) 

) 

) 

) 


Case  No. 


-Searcrahd-Seizerejvareian:] 


To:  •  Any  authorized  law  enforcement  officer 

A-happlicationhyirfedefal  law  enfoTcemenf  offica’Wmrattorney  for  the  goveinment  requests  the  search - — 

ofthe  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identfy  the  person  or  describe  the  property  to  be  searched  and  give  its  location)  \ 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein.  See  Attachment  D 

The  person  or  property  to  be  seainhed,  described  above,  is  beheved  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized): 

See  Attachment  D 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property.  '  . 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  ^  [B _ _ 

(not  to  exceed  14  days) 

sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  properly  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  dmmg  the  execution  ofthe  Wartant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Comt. 

_ Upon  its  retmn,  this  warrant  and  inventory-  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJInitiais 

CU  I  find  that  immediate  notification  may  have  an  adverse  result  fisted  hr  1 8  U.S.C,  §  2705  (except  for  delay 
of  trial),  and  autliorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  vvill  be 
searched  or  seized  (check  the  appropriate  box)  Dfor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 

Date  and  time  issued:  I  l~irr^Cv  _ 


Judge 's  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judoe 
Printed  name  and  title 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

InveiLtory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  pei  jmy  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ _ _ 

Executing  officer ’s  signaitire 


Printed  name  and  title 


ATTACHMENT  D 


I.  Premises  to  be  Searched-— Subject  Premises--4 

The  premises  to  be  searched  (“Subject  Preroises-A’)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

— H— ItSttsToBe-Seized - ^ - —  - 

A.  Evidence,  Eruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  Rom  Subject  Premises-4  are  evidence;  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),'  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
^anlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  'or 
liabilities,  to  others,  including  tc^^^^^^^^^and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consxdtants  or  the  natare 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  pmpose  of  payments  made  to  or  &om  Michael  E).  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  'including  tax  returns,  personal  financial  statements,  and  banlc  records,  from  January  1, 
2013  to  the  present. 

I^^^^Mjc^Nafin^c^nreem^ts,  loans,  and/or  financial  transactions  between 
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and  any  payments  by 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agr'eements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Kai'en  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media7Inc 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephani 
Clifford,  and/or  Karen  McDougal. _ 


e 


Ic.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign, 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  eonnection  with  the  election. 


n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  mclriding  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  pmpose  of  an  accomit  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  accormt;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  elecfronically  stored  information  falling  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 


1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  enciyption  keys,  or  similai’  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
“devices-dPrtofage-media— mcluding-any-hardware-oi'-software-manuals-onotheFdnformatiGn- 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 


- 3  . - Any-evidenee  concerning-theddentities  or  locations  of-those  persons-with  access-to, 

control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 


Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  includmg,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  at  the  outside  of  a  file  cabinet  for  the  markmgs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cru'sorily  reading  the  fu’st  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  ai'eas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  ar’eas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configmution  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  searck  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II,  A  and  ILB  of  this  Attachment.  However,  law  enforcement  personnel  ai'e  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedui'es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attoniey-client  or  other  applicable  privilege.  When  appropriate,  the  procedm'es  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  fi-om  the  investigative  team,  in  order  to 
■address-potential-piivileges, _ ^ _ —  - _  -- _ _ 


IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and.F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  tlie  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 


FBI 


Sworn  to  before  me  on  _ 
8th  day  of  April,  2018  ^ 


HON.HENRY  B;  PltMAJM 
UNITED  STAFES  MAOlSm^TE  JUDGE 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628, 

New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein.  See  Attachment  A 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location): 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630) 
(collectively,  "Room  1628”),  New  York,  New  York  10065,  and  any  closed  containers/items  contained  therein.  See 
Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized) : 

See  Attachment  A  .  '  / 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  ^  % 

(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  fmd  reasonable  cause  has  be^ 

established.  ,  ; 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

□  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court,  ,  _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 

of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whdse  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Gfor  days  (not  to  exceed 30).  '  V 

□until,  the  facts  justifying,  the  later  specific  date  of  '  ^ 


Date  and  time  issued: 


Y'f- /r 


It  4/f) 

City  and  state:  New  York.  NY _ _ 


Judge 's  signature 


Hon.  Henry  B.  Pitman.  U.S.  Mddistrate  Judge 

Printed  name  and  title 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  pequry  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ _ 

Executing  officer ’s  signature 


Printed  name  and  title 


ATTACHMENT  A 


I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

n.  Items  to  Be  Seized  _ _ 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transferanvintere^  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  toj^^^^^^^mand/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  md  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 13  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  by 
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1,  2012  to  the  present. 


,  and  any  payments  by| 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
.DaxidJEecker,_andZojLDylan_Ho.ward._abouCDonaldJrrump,._the...Trump_Campaign,_Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  .identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
If.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  ^ 

New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein.  See  Attachment  A  ^ 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630) 
(collectively,  “Room  1628”),  New  York,  New  York  10065,  and  any  closed  containers/items  contained  therein.  See 
Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

□  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 

of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed 30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 

Date  and  time  issued:  ^  t  E  rT  /St  ^  _ 

'  I  Judge ’s  signature 


City  and  state:  New  York,  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 


Printed  name  and  title 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 

Return 

Case  No.: 

Date  and  time  warrant  executed; 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized; 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer ’s  signature 


Printed  name  and  title 


ATTACHMENT  A 


I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transferanvmterest  in  taxi  medallions,  and  any  associated  debts  or 

^^^^^^^^^Hind/or  entities  associated  with  him. 


liabilities,  to  others,  including  tol 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1 , 
2013  to  the  present. 


Cohen  and 


Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

jand/or  entities  controlled  by| 
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1,  2012  to  the  present. 


and  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tmmp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 


m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the,  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Assnciated  with  the  Email  Accounts 


Maintained  at 
Premises  Controlled  by  Google,  Inc., 
the  Email  Account 

Maintained  at  Premises  Controlled  by 
Oath,  Inc.,  and  the  Email  Account 
maintained 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
20I8R0OI27 


TO  BE  FILED  UNDER  SEAL 


AGENT  AFFIDAVIT 


■j[3  MAG 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  Agent of  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states; 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’ s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 


of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pursuant  to  18 

U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 
^^^^^^^@gmail.com  (the  “Cohen  Account”),  (the  “MDCPC 

Account”), ^^^l^gmail.com  (the  Account”),  (the 

Account”),  and  ^^|@aol.com  (the  “^^^Account”)  (collectively,  the 
“Subject  Accounts”).  The  Cohen  Account,  ^^^^^^^^^^Auccount,  and 
Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Accoimt  is  maintained  and 
controlled  by  1  &  T  Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbrook, 
Pennsylvania  19087  (“1  &  1”),  and  th^^^^Account  is  maintained  and  controlled  by  Oath,  Inc., 
22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  “Providers”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attaehments  A,  B,  C  and  D  to  the 
proposed  warrants. 

3.  As  detailed  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (banlc  fraud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  others  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  loiowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepai'ed  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 
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my  training  and  experience  concerning  the  use  of  email  in  criminal  activity.  Because  this  affidavit 
is  being  submitted  for  the  limited  purpose  of  establishing  probable  cause,  it  does  not  include  all 
the  facts  I  have  learned  during  my  investigation.  Where  the  contents  of  documents  and  the  actions, 
statements,  and  conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in 
part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

4.  I  have  learned  the  following  about  the  Providers: 

a.  The  Providers  offer  email  services  to  the  public.  In  particular,  Google  permits 

subscribers  to  maintain  email  accounts  under  the  domain  name  gmail.com.  Google  also  allows  a 
subscriber  to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For 
example,  if  a  subscriber  controls  the  domain  name  Google  enables  the  subscriber 

to  host  any  email  address  under  this  domain  name  on  servers  operated  by  Google.  Oath  permits 
subscribers  to  maintain  email  accounts  under  the  domain  name  aol.com.  1  &  1  permits  subscribers 
to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For  example, 
if  a  subscriber  controls  the  domain  nam(^^^^^^^|’  1  &  1  enables  the  subscriber  to  host  any 
email  address  under  this  domain  name  on  servers  operated  by  1  &  1.  A  subscriber  using  the 
Providers’  services  can  access  his  or  her  email  account  from  any  computer  connected  to  the 
Internet. 

b.  The  Providers  maintain  the  following  records  and  information  with  respect  to  every 
subscriber  account; 

i.  Email  contents.  In  general,  any  email  (which  can  include  attachments  such 
as  documents,  images,  and  videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form 
in  the  account,  is  maintained  on  the  Providers’  servers  unless  and  until  the  subscriber  deletes  the 
email.  If  the  subscriber  does  not  delete  the  email,  it  can  remain  on  the  Providers’  computers 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 
Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  book.  The  Providers  also  allow  subscribers  to  maintain  the 
equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 

iii.  Subscriber  and  billing  information.  The  Providers  collect  and  maintain 
(typically  unverified)  identifying  information  about  each  subscriber,  including,  for  example,  name, 
username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  (e.g.,  active  or  closed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 
including  any  credit  card  or  bank  account  number. 

iv.  Transactional  information.  The  Providers  also  typically  retain  certain 
transactional  information  about  the  use  of  each  account  on  its  system.  This  information  can  include 
records  of  login  (i.e.,  session)  times  and  durations  and  the  methods  used  to  cormect  to  the  account 
(such  as  logging  into  the  account  through  the  Providers’  website). 

V.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 
complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 
search  history  or  web  history  associated  with  the  subscriber’s  account. 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  with  its  e-mail  accounts:  (A)  “Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchat”  or  “Instant 
Messenger,”  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 
other  in  real  time.  Oath  also  typically  maintains  content  and  records  relating  to  AOL  instant 
message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 
in  real  time. 

viii.  Preserved  and  backup  records.  The  Providers  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preservation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(f).  The 
Providers  may  also  maintain  backxip  copies  of  the  foregoing  categories  of  records  pursuant  to  its 
own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pursuant  to  18  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 
a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedure. 

6.  A  search  warrant  under  §  2703  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  2711(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  the  subscriber  of  the  existence  of  the  warrant.  18  U.S.C. 
§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation.  18  U.S.C.  §  2705(b). 

E.  Prior  Applications 

8.  On  or  about  July  1 8,  2017,  in  connection  with  an  investigation  being  conducted  by  the 
Office  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (“FBI”)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  warrants  for  emails  in  the  Cohen  Account  sent  or  received  between  Jxme  1, 
2015  and  November  13,  2017,  and  emails  in  the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  referred  certain  aspects  of 
their  investigation  into  Cohen  to  the  USAO,  which  is  worldng  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  the  search  warrants  executed  by  the  SCO,  which  had  already 
been  reviewed  for  privilege.  ^  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


^  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
pursuant  to  Fed.  R.  Crim.  P.  41,  to  review  the  emails  obtained  pursuant  to  the  Prior  Cohen  Account 
Warrants  for  evidence  related  to  certain  additional  conduct  that  was  not  the  focus  of  the  Prior 
Cohen  Account  Warrants.  The  emails  obtained  from  the  Prior  Cohen  Account  Warrants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  the  instant  application. 
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responsive  materials  produeed  pursuant  to  the  July  18  and  November  13, 2017  warrants  (the  “Prior 
Cohen  Aeeount  Warrants”). 

9.  On  or  about  November  7,  2017,  and  January  4, 2018,  as  well  as  eertain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  traee  deviees  to  reeord  eommunieations  sent  to  or  from  the  Cohen 
Aeeount.  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  USAO. 
This  affidavit,  as  diseussed  below,  is  based  in  part  on  my  review  of  the  pen  register  data  obtained 
pursuant  to  the  November  7,  2017  and  January  4,  2018  orders  (the  “Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  information  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Information”). 

II.  Probable  Cause 
A.  Overview 

1 1 .  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banlcs.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017 
from  new  consulting  work;  (ii)  significantly  imderstated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 
agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party,  in  connection  with 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
misrepresentations  and  material  omissions,  Cohen  avoided  making  monthly  payments  on  his 
loans,  and  attempted  to  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 
certain  repayment  obligations  worth  millions  of  dollars. 

13.  Based  on  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Warrants, 

MDCPC  Header  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  (i) 
communicate  with  and  attomey.^^^^^^l 

about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  the  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
to  banks.  Additionally,  the 

Account,  .^^^^^^^^^4ccount  and^^|Accoimt,  respectively,  to  communicate  with  Cohen 
about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 
the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 
(“LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Bank  (“Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from  their  obligations,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Melrose  about  his  net  worth,  assets, 
available  cash,  and  financial  outlook.  Specifically,  based  on  my  review  of  records  maintained  by 
Sterling  and  Melrose,  and  public  sources  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-l”)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  loan  payments. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


^  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in 
value  of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber — ^taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value 
of  taxi  medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — like  the  loans  held 
by  Cohen — ^were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files — ^was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment 
due  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  making  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  security,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pursue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements.  In  total.  Sterling  agreed  to  lend 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  transferred  45  percent  of  that  debt  to  Melrose.  ^  Under  the  terms  of  Sterling’s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.“^  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen — ^who  was  the  direct  obligor  under  the  guarantee  agreements — ^was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  records 
maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  beginning  in  or  around 

^  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (‘TSfCUA”). 

^  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  making  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  with  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen — ^which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  which  Cohen  told  Sterling 
Employee-2,  in  sum  and  substance,  about  his  cash  flow  problems  and  a  monthly  shortfall  of 
approximately  $16,000.  hr  that  same  email.  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  financial  information  “indicate[d]  a  strong  ability  to  make  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 
in  Cohen’s  monthly  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
laiow  fiom  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans  with  Cohen  by. 
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among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8,  2017. 

g.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  ^^^^^^^^^|who  would  agree  to 
assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  to  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — and  because  Sterling  was  unfamiliar  with^^l 

Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1, 2017,  Cohen  told  Sterling  Employee-1,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 

Employee-2  on  or  about  February  22, 2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
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Melrose  agree  to  the  terms.  On  or  about  May  2,  2017, 


emailed  Sterling 


Employee-1  from  the  ^^^^^^^^^|A.ccount  to  inquire  about  the  status  of  the  transaction. 
Sterling  Employee- 1  responded  to  at  the  Account  that 

Mehose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending  a  term  sheet 

shortly. 

i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 
financial  information  from  the  parties.  On  or  about  October  26, 2016,  a  Sterling  employee  emailed 
the  ^^^^^^^^^^Account  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 
proceed  with  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 

from^^^^^^^^^^^^^^^^^^^^responded  from  the^^^^^^^^^^Account, 

the  ^^^^^^^^^Account,  that  he  would  send  a  financial  statement  and  tax 
returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Employee-1  emailed  Cohen  to 
request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8,  2017,  Cohen  emailed  Sterling 
Employee- 1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  form  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and 
substance,  that  the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not 
confirmed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1, 1  have  learned  that  Sterling  Employee- 1  reviewed  each  line  of  the  May  20 17  Financial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked 
Cohen  about  the  cash  amorxnt  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 
Employee- 1,  in  sum  and  substance,  that  the  May  2017  Financial  Statement  was  accurate. 

k.  On  or  about  August  16,  2017,  Sterling  Employee-1  emailed  Cohen  at  the  Cohen 


Account  and . 


at  the 


Account,  attaching  a  non-binding  term 


sheet  memorializing  the  potential  transaction  between  Sterling,  Melrose,  Cohen,  and 


On  or  about  August  29,  2017, 


mailed  Sterling  Employee- 1  from  the 


Account,  requesting  that  he  be  included  on  “all  future  e-mails  to 


and/or  I 


concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  30,  2017,  Sterling  Employee-1  emailed 
Account,  Cohen  at  the  Cohen  Account,  and  -^H^t  the  Account,  and  provided  them  with  a 
revised  term  sheet.  On  or  about  September  5,  2017,  Sterling  Employee- 1  sent 


at  the 


\ccount,  Cohen  at  the  Cohen  Accoxmt,  and-^^Hrt  the 


ccount  a 


copy  of  the  executed  term  sheet.  According  to  the  term  sheet. 


would  borrow 


$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that 
acquire  from  Cohen. 

1.  As  part  of  the  agreement,  according  to  the  term  sheet,  $  1 ,265,9 1 3  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 


repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars — ^because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement,  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^^^transaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 


m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 


required  and  requested  additional  financial  statements  for  Cohen  and 


for  its  credit 


underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017, 


sent  from  the 


Account  to  a  Sterling  employee  a  copy  of  I 


personal  financial  statement.  The  financial  statement  lists  the 


Account  as  the  email  contact  for 


Additionally,  on  or  about  October  5,  2017, 


Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Account,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  “September  2017 


Financial  Statement”). 


n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings),^ 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 
time,  he  indicated  was  held  in  trust) .  The  September  2017  Financial  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions  and 
some  of  his  real  estate  investment  entities. 

0.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  at  or  around  the  time  Cohen  provided 
Sterling  with  these  financial  statements — ^in  or  around  September  2017^ — Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 

^Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  which  was  considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen- ^^I^^Hterm  sheet. 
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September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  under-writing  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-’ transaction  was  favorable  for  the  bank 
-  that  is,  that  ^^^^^fwould  be  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29,  2017,  Sterling  sent  Cohen  a 
letter  stating  that  he  was  in  default  under  the  loans  between  Sterling  and  Cohen’s  medallion 
corporations.  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee- 1  on  or  about  January  24, 2018,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen-^^^^^Jtransaction,  Cohen  would  “bring  all  payments  up  to  date  as 
well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen-^^^^^|  transaction.  Sterling 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  Cohen-’^^^^^l  transaction,  however,  did  not  close.  On  or  about  January 
29,  2018,  ^^^the  ^^^^^^^attomey,  emailed  attorneys  for  Sterling  from  the^^^|Vccount 
and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-^^|^^|deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  (“Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  current”  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and  $750,000  to  bring  the  principal  balance  to  $20,500,000.  Cohen  also  suggested  revised  monthly 
interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approximately  $  1 ,750,000),  and  would  need  to  make  larger  monthly  interest 
payments. 

s.  On  or  about  February  1,2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.” 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  interview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  current  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Melrose^)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medallion  loans,  make  monthly  interest  payments,  or  pay  past-due  amounts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(“First  Republic”),  and  then  received  millions  of  dollars  in  purported  consulting  payments  in  these 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accountant^ — Cohen  withheld  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Republic  employees,  I  have  learned,  among  other  things,  the  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities. 


^  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Mehnsesofi^ 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^m^| 
tonsaction.  Based  on  my  review  of  reports  of  interviews  wi6^MRlm|R  employees,  l  also  Know 


that  Cohen  called  employees  at  Melrose  regarding  the  Cohen  I 


transaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Aeeount”).  Cohen  was  the  only  authorized  signatory  on  the  aeeount.  When  Cohen 
opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions’  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic  Employee- 1 
entered  into  a  form^ — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income — separate  from 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  accormt  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  accormt  was  not  intended  to  receive — and  does  not  appear  to  have 
received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the  aecoimt  has 
received  substantial  payments  from  foreign  sources. 

c.  First,  on  or  about  October  27,  2016 — ^the  day  after  he  opened  the  Essential 
Consultants  Accormt,  Cohen  used  the  accormt  to  wire  $130,000  to  an  accormt  held  in  the  name  of 
attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


’  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

^  First  Republic  Employee- 1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  rather  was  a  “settlement”  payment  made  to  Davidson’s 
client.  ®  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair  with  Donald  Trump.  On  or  about  February  13, 2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

d.  Second,  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Accoimt,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  EEC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  EEC. 

^  Specifically,  I  have  learned  from  my  review  of  bank  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  from  a  home  equity  line  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Eos  Angeles;  and  on  or  about  November  1,  2016,  a  wire  transfer  in  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  bank  account  in  the  name  of 
Davidson’s  client. 


02.28.2018 


22 


ii.  Beginning  on  or  about  April  5, 2017,  Cohen  began  receiving  payments  from 
Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”).  Between  April  2017  and  January 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

hi.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10, 2017,  June  9,  2017,  July  10, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertshank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  January  10, 2018, 
the  Essential  Consultants  Account  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10, 2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
Cohen  was  the  only  authorized  signatory  on  the  account.  Among  other  things,  the  MDC&A 
Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Account  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accounts  to  Sterling  during  the  negotiations  with  respect  to  the 
transaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Warrants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration.  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 

Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 


02.28.2018 


24 


a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  the  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1,  2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbursed 
through  eight  $150,000  installments  between  May  2017  and  December  2017. 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  from  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Banlc.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Banlc  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  February  13, 2017,  Cohen  emailed  an  AT&T  employee  from  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants] ’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my 
review  of  reports  of  interviews  with  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 

d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  eontract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
Administration. 

e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would 
“jointly  represent  clients.” 

18.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
by  Getzel,  and  my  review  notes  and  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  a  law  firm  in  Manhattan,  New 
York.  At  the  meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice 
called  Michael  D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants 
LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[a]ttached  is  a  draft  of  the  new  PFS  as  of  September  30, 2017” 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  draft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt.  In  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 
that  the  financial  statement  did  not  list  any  assets  associated  with  either  the  Essential  Consultants 
Account  or  the  MDC&A  Accoimt:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D.  Cohen  &  Associates  POC  [.szc]  and  Essential  Consultants  EEC.  Please  advise  whether 
or  not  these  should  be  disclosed  and  what  value.” 

c.  On  or  about  October  6,2017,  Cohen  called  Getzel  by  telephone — ^which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 20 1 7,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[IJooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  from  my  review  of  banlc  records  and  emails  sent  by  Cohen 
to  Sterling,  I  know  that  the  September  2017  Financial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Account  or  the  MDC&A  Account.  As  of 
September  30,  2017 — ^the  date  of  the  September  2017  Financial  Statement — Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the  MDC&A 
Account.  As  of  October  6, 2017,  the  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
MDC&A  Account  from  Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated 
his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned  the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689. 1 8  in  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30,  2017. 

f.  As  of  September  30,  2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife — -and  the  total  balance  across  the  two  accounts  as  of  September  30,  2017  was  $300,096.72. 

h.  In  total,  as  of  September  30,  2017,  Cohen  had  at  least  $5,014,051.80  in  his  accounts 
at  Capital  One  Bank,  Signature  Bank,  TD  Bank,  Bethpage  Credit  Union,  First  Republic,  and 
Morgan  Stanley. 

21 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  m  funds  from  Sterling  and  Melrose,  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee- 1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Melrose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 

Cohen  Had  a  Side  Agreement  With  ~ 

22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 

sell  his  interest  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 
negotiated  with  appears  that  ^m^^^^agreed  to  pay  an  above-market  price  for 

Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  approximately 
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$3.8  million  in  cash.  Specifically,  from  my  review  of  doeuments  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee- 1,  as  well  as  my  partieipation  in  an  interview  with  Sterling  Employee-2,  f  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  exeeuted  term  sheet  was  cireulated  by  Sterling 
Employee-1  to  Cohen  and^^^^^^l  See  supra  $  14(k).  According  to  the  term  sheet, 

would  borrow  $20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions 
that  ^^^^^|was  to  aequire  from  Cohen.  At  apriee  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,913  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  to  or  any  other  form  of  payment  or 

financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  Oetober  4,  2017, 

deseribing  the  terms  of  the  Cohen-^^^^^Jtransaction  and  the  new  loan  tc 
not  mention  any  payments  from  Cohen  to  including  a  $3.8  million  payment.  The 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  eurrent  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  agreed  to  a  purchase 

price  of  $625,000  in  exehange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to 
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23.  While  Cohen  did  not  disclose  any  payment  from  Cohen  to 

n  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 

in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”** 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

payment  of  $3,800,000  to  but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 

$3,800,000  to  pay  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^j^^^^^was  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen  to 

**  The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  2015,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
In  the  course  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/or  MDCPC 
Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 
side-payment  at  the  Account, 

^^^^^^at  the  Account,  and  .[miim  at  the^^^Account. 

as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohen-^^^^^|  transaction  with  Sterling: 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  principal  amount  of  the  loan,  see  supra  T|  14(g),  to  send  term  sheets  to  Sterling,  see  supra  Tf 
14(j),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  T| 
16,  to  send  financial  statements  to  Sterling,  see  supra  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  T|  14(n),  to  negotiate  a  reduction  of  his  debt  with 
Sterling  on  or  around  January  31,  2018,  see  supra  T|  14(o),  to  tell  Sterling  on  February  1, 2018,  he 
does  not  have  the  ability  to  pay  more  than  $1,250,000,  see  supra  Tf  14(p),  and  to  communicate  with 
individuals  responsible  for  sources  of  payments  to  the  Essential  Consultants  Account,  see  supra  If 
15.  In  other  words,  from  the  communications  described  above,  it  appears  likely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 

b.  j^l^H^^^^^has  the  HHmilll Account  to  communicate 

the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
was  previously  receiving  at  the  Cohen  Account.  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5, 2017,  Cohen  sent  an  email  from  the 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 
contact  and  communications.”  The  signature  line  on  the  email  listed  “Essential  Consultants  LLC” 
and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address. 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 
pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  the  Cohen  Account,  to 
communicate  with  thtj^^Jwcount,  and  to  send  and  receive  emails  from  other  email  accounts 
about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  that  since  the  November  13, 2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MDCPC  Header  Information  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
were  communicating  about  a  term  sheet  for  the  Cohen-'HHH|^|taxi 


Based  on  my  review  of  emails  from  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  the  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infra  Tf  27. 
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medallion  transaction,  see  supra  ^  14(k),  Cohen  used  the  MDCPC  Account  to  send  or  receive 
emails  from^^^it  the^^^|'^ccount.  For  instance,  on  or  about  August  22,  2017,  ^^|used 
the  ^^|\ccount  to  send  an  email  to  Sterling  Employee- 1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day,  Sterling  Employee-1  responded  to|^^|at  the^^Jkccount 
and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22,  2017,  Cohen  also  used  the  MDCPC 
Account  to  send  an  email  to  Sterling  Employee-1. 

b.  As  noted  above,  on  or  about  September  1,  2017,  Cohen  used  the  MDCPC  Account 

to  send  or  receive  eight  emails  with  the  Account. 

c.  Cohen  used  the  MDCPC  Account  to  send  and  receive  einails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  political  consulting  agreement.  For 
example,  beginning  in  April  2017 — ^the  same  month  when  Cohen  began  receiving  payments  from 
AT&T,  see  supra  16(d),  17(c) — Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  from  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017 — ^which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  16(d),  17(d) — 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  ftom  employees  of  Novartis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 
assistance  on  an  initiative  relating  to  drug  pricing. 

d.  From  my  review  of  the  MDCPC  Header  Information,  I  have  learned  that  Cohen  has 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appears  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Accovmt  was  used  to  send  and 
receive  emails  from  accounts  belonging  to  individuals  using  @novartis.com  email  addresses. 
Since  November  15, 2017,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.lcz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Bank,  see  supra  1 6(d),  17(b),  and  @squirepb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  law  firm  Squire  Patton  Boggs — ^both  of  which  Cohen  appears  to  have  a 
consulting  relationship  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra  ^ 
9,  it  appears  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  (z.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the 
imiH^ccount,  the  U Account,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 
has  revealed  the  following: 

a.  Emails  sent  by  the  Cohen  Account  to  thejj^HVccount  on  or  about  December  18, 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  January  3, 

2018  at  8:01  a.m.,  January  3,  2018  at  2:56  p.m.,  and  January  4,  2018  at  3:31  p.m. 

b.  An  email  sent  by  the  Cohen  Account  to  the  jj^^^^^^^^^Account  on  or  about 
January  25,  2018  at  8:55  p.m. 
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c.  Emails  from  the  Cohen  Aceount  to  the  email  account 


on  or 


about  December  1,  2017  at  2:14  p.m.,  December  29,  2017  at  10:20  p.m.,  January  2,  2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 
emails  contained  in  the  Cohen  Account,  I  have  learned  that  the  email  account 

belongs  to  Jefifey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

d.  Emails  from  the  Cohen  Account  to  email  accounts  belonging  to  Sterling  employees, 
including  Sterling  Employee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at  5:30  p.m.,  January  29, 2018  at  8:29  p.m.,  January  30, 2018  at  6:44 

p.m. 

e.  An  email  sent  from  the  Cohen  Account  to  the  email  account 
clientserviceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 

f  Numerous  emails  sent  from  the  Cohen  Account  to  the  email  account 
including  emails  on  or  about  December  4, 2017  at  2: 17  p.m.  and  January  29, 
20 1 8  at  5 :43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 

I  the  email  address  belongs  to 

29.  Based  on  my  review  of  records  maintained  by  Sterling,  I  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen-^^^^^^Jtransaction. 
Based  on  my  training  and  experience,  I  know  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 
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also  know,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 
contain  evidence  related  to  the  Subject  Offenses. 

30.  Thus,  I  respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  commxmicated 
with  and  primarily  through  the  Cohen  Account  and 

MDCPC  Account,  I  know,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  the  'jUmimilll  Account,  .||||||m||^^H||||  Account  and  '^^^Account  since  on  or 
about  October  1,  2016 — ^the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — ^will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
described  above — such  his  misstatements  and 

omissions  to  fmancial  institutions. 
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31.  Temporal  Limitation.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attachments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  1 4, 20 1 7,  and  the  date  of  the  proposed  warrant,  inclusive .  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  from  the  Cohen  Account  that  were  sent,  created,  or  received  before  November  14,  2017. 
This  application  also  seeks  other  information  specified  above  associated  with  the  Cohen  Account 
that  was  created  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  from  the  MDCPC 
Account  that  were  sent,  created,  or  received  before  November  14,  2017. 

c.  For  the^^^^^^^^^Account  and  .^^^^^^^^^Account,  this  application 
seeks  emails  and  all  other  content  information  specified  above  sent,  created,  or  received  between 
October  1,  2016,  and  the  date  of  the  proposed  wanunt,  inclusive.  As  described  above,  October 
2016  is  the  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale  with 

d.  For  the  Account,  this  application  seeks  emails  and  all  other  content 

information  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  2016  is  the  month  in  which^^| 
began  representing  the^^^^^^^n  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  1  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Groogle’s  servers  associated  with  the  Cohen  Account  will  contain  evidence, 

39 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  II  of  Attachment  A  to  the  proposed  warrant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 
and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^|^^|and/or  entities 
associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^^and/or  entities  associated  with  him; 

f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
accessed  or  used,  to  determine  the  geographic  and  chronological  context  of  account  access,  use, 
and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  it 
relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  1  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the^^^^^^^^^|4ccount  and^^^ 
^^^^^^|\ccount  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of  the  Subject 
Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  the  person(s)  who  created  or  used  Account  and 

Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 

or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
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communicated  with  the  Account  anc^^^^^^^^^^^Account  about  any 

matters  relating  to  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
^^^^^^|md/or  entities  associated  with  him; 

between  the  Account 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Melrose,  or  other  financial 
institution(s),  regarding  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Account  and 

Account  were  accessed  or  used,  to  determine  the  geogi’aphic  and  chronological  context 

of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  Account  and  Account 

owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the^^^|4ccoxmt  will  contain  evidence, 
fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following; 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the^^HAccount; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^^|and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  ^^^|^ccount  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  ^^^^^^^^|and/or  entities  associated  with  him; 

d.  Communications  between  the  ^^^J^ccount  and  others,  including  employees  or 
representatives  of  Sterling,  Melrose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

ni.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  directed  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
persoimel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  the  government,  attorney  support 
staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  unique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

37.  Because  Cohen  and^^^^re  attorneys,  the  review  of  the  content  within  the  Subject 
Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  persormel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  proeedures  will  inelude  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communieations 
and  detennine  whieh  communications  to  release  to  the  investigation  and  prosecution  team. 

IV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Cohen  that  he  is  under  investigation,  causing  him  to  destroy  evidence,  flee  from  prosecution,  or 
otherwise  seriously  jeopardize  the  investigation.  M  particular,  based  on  my  experience 
investigating  white  collar  cases,  including  cases  featuring  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordingly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuantto  18U.S.C.  §  2705(b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  permitted  without  further  order  of  this  Court  to  provide  copies  of  the  warrant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
§  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41. 

United  States  Attorney’s  Office 
Southern  District  of  New  York 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
naintained  at 
1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


Fremises  Controlled  by 


Search  Warrant  and  Non-Disclosure  Order 

TO:  1  &  1  Internet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account^^^^^^^^^^^^maintamed  at  premises  controlled  by  1 
&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in 
Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 
Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  II  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  required  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 


2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 
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Email  Search  Attachment  D 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Internet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
information  within  the  Provider’ s  possession,  custody,  or  control  associated  with  the  email  account 
'the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 
and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  HI  below. 

II.  luformation  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 


number,  alternate  email  addresses,  registration  IP  address,  aeeount  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  suhscriher  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preseiwation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accoimt; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
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medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 


entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  fdes  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 

person(s)  -  who  communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential 
Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  fdes  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 


Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UMIED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associatef^ith  the  Email  Accounts 
^^^2^H@gmail.com, 
IH^I^gmail.com,  and 

Maintained  at 

-fremises  uontrolled  by  Google,  Inc., 
USAO  Reference  No.  20I8R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO;  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^^^^gmail.com,  ^^^^^gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 


electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


A  i  i  I  n  I  , , 


Southern  District 'pfNew  York 
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Email  Search  Attachment  A 


I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
@gmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account; 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  1 4, 20 1 7  and  the  date  of  this  warrant, 
inclusive. 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  mcluding  but  not  limited  to  name,  username,  address,  telephone 


number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  ff  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  coiTespondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  the  date  of  this  warrant,  inclusive. 

f  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Accorunt,  limited  to  items  sent,  received,  or  created 
between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(1)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  ofviolations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  orto  defraud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  to^^^^^^^^^and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 


I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts ^^^l^gmail.com  and  (the  “Subject  Accounts”)  for  the  time 

period  between  October  1,  2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 


number,  alternate  email  addresses,  registration  ff  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  ff  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  'and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §  §  37 1  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (banlc  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 


Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “fdter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
A||ndated  with  the  Email  Account 
^^H^aol.com,  Maintained  at 
Fremises  Controlled  by  Oath,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Oath,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accountHUj^aoLcom,  maintained  at  premises  controlled  by  Oath, 
Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachment  C 
hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies, 
within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II 
of  Attachment  C  hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in 
Sections  III  and  IV  of  Attachment  C.  The  Government  is  required  to  serve  a  copy  of  this  Warrant 
and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be 
served  via  electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of 
accepting  service. 


2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  beheve  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  he  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York  i  \  ^  ^  , 


’  i)ate  Issued 


Time  Issued 


YA.. 


H^OP._ABIJE  CjABR^^.  GORENSTEIN 
mief  IJnifed  States  Miigistrate  Judge 
Southern  District  df  New  York 
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Email  Search  Attachment  C 


I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Oath,  Inc.  (the  “Provider”),  headquartered  at  22000  AOL  Way, 
Dulles,  Virginia  20166,  and  applies  to  all  content  and  other  information  within  the  Provider’s 
possession,  custody,  or  control  associated  with  the  email  account^^|@aol.com  (the  “Subject 
Account”)  for  the  time  period  between  December  1,  2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  inforaiation  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 


d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contaets  with  support  serviees 
and  records  of  actions  taken. 

f  Search  History.  All  search  history  and/or  web  history. 

g.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  reeords,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise, 
in.  Review  of  Information  by  the  Government 

Law  enforeement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  ageney  personnel  assisting  the 
government  in  this  investigation,  and  outside  teehnical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  loeate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§  371  (conspiraey  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  finaneial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communieations,  records,  documents,  and  other  files  neeessary  to  establish  the  identity 
of  the  person(s)  who  ereated  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tc^^^^^^^^^|md/or  entities  assoeiated 
with  him; 
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c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^|and/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Account  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances;  and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  Ifom  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 


3 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 


for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

A  Device  Containing  the  Resuits  of  Three  Emaii 
Search  Warrants,  See  Attachment  A 


Casa 


AG 


APPLICATION  FOR  A  SEARCH  WARRANT 


I,  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 


Tty  to  be  searched  and.giv^ts  locatio, 

iviee^Gontaininglne-Resurts-o 


ree-EmaikSearch  WarrantsTcSee-'AttachmentAv 


located  in  the 


Southern 


District  of 


New  York 


,  there  is  now  concealed  (identify  the 


person  or  describe  the  property  to  be  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAViT  AND  RIDER. 


The  basis  for  the  search  under  Fed.  R.  Grim.  P.  41(c)  is  (check  one  or  more): 
sf  evidence  of  a  crime; 

□  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

□  property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 


Code  Section 
18  use  371,  1005,  1014, 
1343,  1344 


Offense  Description 

Conspiracy  to  defraud  the  United  States;  false  bank  entries;  false  statements  to  a 
financial  institution;  wire  fraud;  bank  fraud 


The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

sT  Continued  on  the  attached  sheet. 

Delayed  notice  of  30  days  (give  exact  ending  date  if  more  than  30  days:  _ 
under  18  U.S.C.  §  3 103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


)  is  requested 


Sworn  to  before  me  and  signed  in  my  presence. 

Date:  j 

City  and  state:  (vy 


Hon.  Gabriel  W.  Gorenstein,  U.S.  Magistrate  Judge 
Printed  name  and  title 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  Of  America  for  a  Search  Warrant  for  A 
Device  Containing  the  Results  of  Three  Email 
Search  Warrants,  USAO  Reference  No 
2018R00127 


Agent  Affidavit  in  Support  of 
Application  for  a  Search  Warrant 


TO  BE  FILED  UNDER  SEAL 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


Special  Agent 


of  the  United  States  Attorney’s  Office  for  the  Southern 


District  of  New  York,  being  duly  sworn,  deposes  and  says 


I.  Introduction 


A.  Affiant 


1.  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August 
2016.  I  previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  electronic  device  specified  below  (the 
“Subject  Device”)  for  the  items  and  information  described  in  Attachment  A.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  computers  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored  information 
(“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of  establishing  probable 


2 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  3  of  105 


cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  course  of  my  investigation. 
Where  the  contents  of  documents  and  the  actions,  statements,  and  conversations  of  others  are 
reported  herein,  they  are  reported  in  substance  and  in  part,  except  where  otherwise  indicated. 

B.  Prior  Warrants  and  the  Subject  Device 

3.  As  set  forth  in  detail  below,  the  USAO  and  the  Federal  Bureau  of  Investigation 
(“FBI”)  are  investigating,  among  other  things,  a  scheme  by  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 


Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

4.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  (collectively,  the 
“SCO  Warrants”)  for  emails  and  other  content  information  associated  with  two  email  accounts 
used  by  Cohen.  Specifically: 

a.  On  or  about  July  18,2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  ^^^^^^J^gmail.com  (the  “Cohen  Gmail  Accounf’)  sent  or  received 
between  January  1,  2016  and  July  18,  2017.  This  warrant,  which  is  numbered  17-mj-00503,  is 
attached  as  Exhibit  A  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
November  13,  2017.  This  warrant,  which  is  numbered  17-mj-00855,  is  attached  as  Exhibit  B  (the 
“Second  Cohen  Gmail  Warrant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  account  “Cohen  MDCPC  Accounf’)  sent  or 
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received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017.  This 
warrant,  which  is  numbered  17-mj-00854,  is  attached  as  Exhibit  C  (the  “Cohen  MDCPC 
Warrant”). 

5.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  SCO  Warrants.  A  filter  team  working  with  the  SCO 
had  previously  reviewed  the  e-mails  produced  pursuant  to  the  SCO  Warrants  for  privilege. 

6.  These  emails  are  contained  on  the  Subject  Device,  which  is  particularly  described 
as  a  black  and  red  USB  drive  with  a  white  label  that  says  “Tracking  #:  180208140208.”  That  is, 
the  Subject  Device  contains  the  emails  and  other  content  information  obtained  pursuant  to  the  SCO 
Warrants,  less  any  emails  that  were  screened  and  removed  by  the  SCO’s  privilege  team. 

7.  The  Subject  Device  is  presently  located  in  the  Southern  District  of  New  York. 

C.  The  Subject  Offenses 

8.  The  affidavits  in  support  of  the  SCO  Warrants  describe  evidence  of  several 
different  courses  of  conduct  by  Cohen,  including,  among  other  things,  false  statements  to  financial 
institutions  relating  to  the  purpose  of  an  account  he  opened  in  the  name  of  Essential  Consultants 
EEC  and  the  nature  of  funds  flowing  into  that  account,  and  activities  undertaken  by  Cohen  on 
behalf  of  certain  foreign  persons  or  foreign  entities  without  having  registered  as  a  foreign  agent. 
The  SCO  Warrants  accordingly  define  the  evidence  to  be  seized  by  reference  to  subject  offenses 

^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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and  specific  categories  of  information  related  to  these  courses  of  conduct.  The  subject  offenses  in 


the  SCO  Warrants  are  summarized  as  follows: 


Exhibit 

Warrant 

Subject  Offenses  in  Prior  Warrant 

A 

First  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1956  (money 
laundering),  95 1  (acting  as  an  unregistered  foreign  agent),  and  22  U.S.C. 
§§611  etseq.  (Foreign  Agents  Registration  Act  (“FARA”)) 

B 

Second  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

C 

Cohen  MDCPC  Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (banlc  fraud),  1956  (money  laundering),  951  (acting  as  an 
um'egistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

9.  Based  on  my  participation  in  this  investigation,  including  my  review  of  documents 
obtained  pursuant  to  subpoena  and  court  order,  my  conversations  with  witnesses  and  review  of 
reports  of  conversations  with  witnesses,  and  my  review  of  publicly  available  information,  I  have 
learned  of  additional  conduct  by  Cohen,  described  below,  which  was  not  described  in  the  affidavit 
seeldng  the  First  Cohen  Gmail  Warrant  and  was  described  briefly  in  the  affidavits  seeking  the 
Second  Cohen  Gmail  Warrant  and  the  Cohen  MDCPC  Warrant.^ 

10.  lam  therefore  requesting  authority  to  expand  the  search  of  the  non-privileged  e- 
mails  obtained  pursuant  to  the  SCO  Warrants,  as  contained  on  the  Subject  Device,  for  evidence 
related  to  this  additional  conduct.  As  set  forth  below,  in  addition  to  the  categories  of  evidence 
already  described  in  the  SCO  Warrants,  there  is  probable  cause  to  believe  that  the  Subject  Device 
contains  evidence  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the  United  States),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (whe  fraud),  and  1344 
(bank  fraud)  (collectively,  the  “Subject  Offenses”),  related  to  the  additional  conduct  described 
below.^ 


^  I  do  not  base  this  application  on  my  review  of  emails  obtained  pursuant  to  the  SCO  Warrants. 

^  The  SCO  Warrants  cite  many  of  the  same  statutes  as  subject  offenses  and  describe  categories  of 
information  that  likely  encompass  evidence  of  the  additional  conduct  described  herein. 
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II.  Probable  Cause  Regarding  the  Subject  Offenses 

1 1 .  Together  with  this  application,  I  am  submitting  an  application  for  a  search 
warrant,  pursuant  to  18  U.S.C.  §  2703,  for  all  content  and  other  information  associated  with  (a) 
the  Cohen  Gmail  Account,  for  the  time  period  November  14,  2017  to  the  present;  (b)  the  Cohen 
MDCPC  Account,  for  the  time  period  November  14,  2017  to  the  present;  and  (c)  three  other 
email  accounts.  The  affidavit  in  support  of  this  application  is  attached  as  Exhibit  D  (the 
“Accompanying  Affidavit”),  and  is  incorporated  by  reference  as  if  fully  set  forth  herein. 

12.  As  set  forth  in  the  Accompanying  Affidavit,  there  is  probable  cause  to  believe  that 

Cohen  has  made  affirmative  misrepresentations  in  and  omitted  material  information  from  financial 
statements  and  other  disclosures  that  Cohen  provided  to  multiple  banks  in  connection  with  a 
transaction  intended  to  relieve  Cohen  of  approximately  $22  million  in  debt  he  owed  on  taxi 
medallion  loans  from  the  banks.  As  set  forth  in  detail  in  the  Accompanying  Affidavit,  in  these 
financial  statements,  and  in  his  oral  and  other  written  statements  to  these  banlcs,  Cohen  appears  to 
have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017  from  new  consulting 
work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash  equivalents;  and  (iii)  failed 
to  inform  the  banlcs  from  which  he  was  seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8 
million  cash  payment  to  a  third  party,  in  connection  with  H||||||||||||||||| 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these  misrepresentations  and 
material  omissions,  Cohen  avoided  making  monthly  payments  on  his  loans,  and  attempted  to  and 
has  secured  proposed  agreements  from  the  banks  to  relieve  him  of  certain  repayment  obligations 
worth  millions  of  dollars. 


Nevertheless,  in  an  abundance  of  caution,  I  am  seeking  explicit  authorization  to  search  the  Subject 
Device  for  evidence  of  this  additional  conduct. 
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13 .  As  noted  above,  the  Accompanying  Affidavit  seeks  email  content  for  the  Cohen 
Gmail  Account  and  the  Cohen  MDCPC  Account  for  the  period  from  November  14,  2017  to  the 
present,  and  therefore  establishes  probable  cause  that  a  search  of  the  email  content  from  that  time 
period  will  reveal  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses.  As  set  forth 
below,  the  Accompanying  Affidavit  also  establishes  probable  cause  to  believe  that  a  search  of 
the  Subject  Device  (i.e.,  the  non-privileged  emails  from  the  earlier  time  periods  covered  by  the 
SCO  Warrants)  will  similarly  reveal  evidence,  fruits,  and  instrumentalities  of  the  Subject 
Offenses."^  For  example,  as  described  in  the  Accompanying  Affidavit: 

a.  In  or  about  December  2014,  Sterling  National  Bank  (“Sterling”)  agreed  to 
lend  approximately  $22  million  to  Cohen’s  medallion  companies.  See  Accompanying  Affidavit 
1 14(c). 

h.  In  or  about  September  20 1 5,  Cohen  began  pushing  Sterling  for  a  reduction 
in  his  monthly  payments.  See  id.  f  14(e). 

c.  In  or  about  October  20 1 6,  Cohen  told  a  Sterling  employee  (“Sterling 
Employee- 1”)  that  he  had  a  potential  buyer  of  his  taxi  medallions,  namei 
would  agree  to  assume  Cohen’s  debt  with  Sterling  (and  Melrose  Credit  Union,  the  participating 
bank).  See  id.  f  14(g).  Negotiations  of  the  potential  taxi  medallion  transaction  then  followed  for 
more  than  a  year.  See  id.  14(g)-(q). 


As  noted,  the  Subject  Device  contains  email  content  for  the  Cohen  Gmail  Account  from  the 
period  of  June  1,  2015  to  November  13,  2017,  and  email  content  for  the  Cohen  MDCPC  Account 
for  the  period  of  March  2017  to  November  13,  2017. 


I,  who 
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d.  On  or  about  February  22,  2017,  the  Cohen  Gmail  Account^  sent  an  email  to 
a  Sterling  employee  (“Sterling  Employee-2”)  stating  that  he  “agreed  to  pay  down  1  million  from 
the  loan  amount.”  See  id.  ^  14(g). 

e.  On  or  about  June  8,  2017,  Cohen  emailed  Sterling  Employee-1  from  the 
Cohen  Gmail  Account,  attaching  a  Sterling  personal  financial  statement  form  that  had  been  filled 
out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017  (the  “May 
2017  Financial  Statement”),  that  was  also  attached.  See  id.  14(i). 

f.  On  or  about  October  5,  2017,  Cohen,  using  the  Cohen  Gmail  Account,  re¬ 
sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October  6, 
2017,  Cohen,  using  the  Cohen  Gmail  Account,  emailed  Sterling  Employee-2  a  statement  of 
fmancial  condition,  dated  September  30,  2017  (the  “September  2017  Financial  Statement”).  See 
id.  14(m).  The  September  2017  Financial  Statement  omitted  assets  that  Cohen  held  in  certain 
bank  accounts  and  substantially  understated  his  available  cash  and  cash  equivalents.  See  id.  TjH 
19-20. 

g.  It  appears  that  Cohen  set  up  the  Cohen  MDCPC  Account  to  receive  emails 
he  was  previously  receiving  at  the  Cohen  Gmail  Account.  On  or  about  May  5,  2017,  Cohen  sent 
an  email  from  the  Cohen  MDCPC  Account  to  a  bhnd  copy  list  of  recipients,  stating  that  “[d]ue  to 
the  overwhelming  volume  of  phone  calls  and  emails  coming  into  my  previous  cellular  number 
and  e-ma.i1  address,  I  have  elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new 


^  As  noted  in  n.2,  supra,  I  do  not  base  this  application  on  my  review  of  emails  obtained  pursuant 
to  the  SCO  Warrants.  Where  the  content  of  emails  sent  from  or  received  by  the  Cohen  Gmail 
Account  and/or  the  Cohen  MDPC  Account  are  described  herein,  my  description  is  based  on  copies 
of  these  emails  produced  by  third  parties  pursuant  to  subpoena  or  otherwise. 
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information  for  all  future  contact  and  communications.”  The  signature  line  on  the  email  listed 
the  Cohen  MDCPC  Account  as  the  new  email  address.  See  id.  ^  26. 

h.  Based  on  my  review  of  header  information  obtained  by  court  order,  I  have 
learned  that,  on  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 

and  were  communicating  about  a  term  sheet  for  the 

Cohen-’^^^^^|;taxi  medallion  transaction,  the  Cohen  MDCPC  Account  sent  or  received 
emails  from  including  emails  on  which  Sterling  employees  were  copied.  On  or  about 
August  22,  2017,  Cohen  also  used  the  Cohen  MDCPC  Account  to  send  an  email  to  Sterling 
Employee-1.  See  id.  ^  27(a). 

i.  Based  on  my  review  of  header  information  obtained  by  court  order,  I  have 
learned  that  on  or  about  September  1,  2017 — at  or  around  the  time  the  j^^^^^^jand  Cohen 
were  negotiatiug  a  term  sheet: — ^the  Cohen  MDCPC  Account  sent  or  received  eight  emails  to  or 

See  id.  ^  25(h). 

14.  Therefore,  there  is  probable  cause  to  believe  that  a  search  of  the  Subject  Device 
will  reveal  evidence,  fruit  and  instrumentalities  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling, 
Melrose,  and/or  taxi  medallions; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan, 

proposal,  or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish 
the  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  - 
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who  communicated  with  the  Cohen  Gmail  Accoimt  and/or  the  Cohen  MDCPC  Accormt  about  any 
plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest 
in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 
and/or  entities  associated  with  him; 

d.  Communications  between  the  Cohen  Gmail  Account  and/or  the  Cohen 
MDCPC  Account  and  Jeffrey  Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or 
finances; 

e.  Evidence  indicating  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC 
Account  owner’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

III.  Procedures  for  Searching  ESI 
A.  Review  of  ESI 

1 5 .  Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and 
agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related 
proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under 
government  control)  will  review  the  ESI  contained  on  the  Subject  Device  for  information 
responsive  to  the  warrant. 

16.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  contained  on  the  Subject  Device.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
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searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  kejw/ord  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  umque 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  kejw/ords  that  an  agent  is  likely  to  search  for. 

IV.  Conclusion  and  Ancillary  Provisions 

17.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 

18.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  and  for  the 
reasons  more  fully  set  forth  in  the  Accompanying  Affidavit,  I  respectfully  request  that  this  affidavit 
and  all  papers  submitted  herewith  be  maintained  under  seal  until  the  Court  orders  otherwise. 


Special  Agent,  US  AO 


Sworn  to  before  me  on 
day  of  F^hmary,  2018 


iN.  GABRIEL  W.  GaRfiNSl'EIN, 


ITED 


JUDGE 
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Attachment  A 


I.  Device  to  be  Searched 

The  device  to  be  searched  (the  “Subject  Device”)  is  described  as  a  black  and  red  USB  drive 
with  a  white  label  that  says  “Tracking  #;  1 80208140208”,  which  contains  emails  and  other  content 
information  obtained  pursuant  to  the  three  search  warrants,  numbered  17-mj-00503,  17-mj-00855 
and  17-mj-00854,  obtained  by  the  Special  Counsel’s  Office  (“SCO”),  less  the  emails  that  were 
screened  and  removed  by  the  SCO’s  privilege  team. 

II,  Revievr  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
zTand-depending-rOnrtheTnature^oTtherESI-andLhe-status-oTthednvestigatiomandLrelated^proceedings,, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Device  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  ofl8U.S.C.  §371  (conspiracy  to  defraud  the  United 
States),  1005  (false  banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”),  as  listed  below: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 


agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

c.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 
person(s)  —  who  communicated  with  ^^^^^^^^gmail.com  and/or  ^^^y|||||^||m|||  (the 
“Subject  Accounts”)  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 


associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to and/or  entities  associated  with  him; 

d.  Communications  between  the  Subject  Accounts  and  Jeffrey  Getzel  relating  to 
Michael  D.  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances; 
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e. 


Evidence  indicating  the  owner  of  the  Subject  Accounts’  intent  as  it  relates  to  the 


Subject  Offenses  under  investigation. 
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Exhibit  A 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


JlJt  M  W 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  he  searched  ) 

or  identijy  the  person  by  name  and  address)  ^ 

INFORMATION  ASfiOCIM22  WITH  THE  EMAIL  ) 

ACCOUNT  ^^^^^■©GMAIL.COM  ) 


) 


T.U-rnrOOSOS  ' 

salgned  To:  Hawaii,  Beryl  A. 


SEARCH  AND  SEIZURE  WARRANT 


Tor  Any  authorized  law  enforcement  officer . .  . . ’ .  . 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  Northern  District  of  _ California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

See  Attachment  A. 


I  find  that  the  affldavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized)'. 

See  Attachment  B. 


YOU  ARE  COM31ANDED  to  execute  this  warrant  on  or  before  _ August  1 ,  2017  (not  to  exceed  14  days) 

in  the  daytime  6:00  a,m.  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 

as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  _ _ Hon,  Beryl  A.  Howell  _  . 

(United  States  Magistrate  Judge) 

□  Pursuant  to  18  U.S.C.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ A&ys  (not  to  exceed  30)  □  Until,  the  facts  justifying,  the  later  specific  date  of _ _ ^  j 


Date  and  time  issued: 


Judge 's  signature 


City  and  state;  Washington,  DC  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  16  of  105 


AO  93  (Rev  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  anc!  time  warrant  executed: 

~yjtb/'2^n 

Copy  of  warrant  and  inventory  left  with: 

G-oofi^Ci^  Utq^l 

Inventory  made  in  the  presence  of 

. 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Or^if^l  files'  ns-fforf 

i  -  '2^0no7\q~  ) 


A  -fi- 


JUL  2  i  m 

Clerk,  u.s.  District  and 
Bankruptcy  Courts 


Ccrtificiition 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Printed  tumie  ami  title 
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'  ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
^^^^^^|@gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by 
Google,  a  company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
aeeounfcorfident-ifier-listeddn:A-ttachmentrA4rr=T-^= _ - 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
•session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  Indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

- and^ - - . . . - 

k.  All  telephone  or  insti-ument  numbers  associated  with  the  Account  (including  MAC 
addresses.  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution)  and  18  U.S.C.  §  1956  (money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an 
unregistered  foreign  agent)  and  the  Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  61 1 
et  seq.,  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,  2016,  including,  for 
each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  EEC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
EEC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

ii  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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Exhibit  B 
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AO  93  (Rev,  1 1/13)  Search  and  SeiVure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 

) 

)  Case:  1:1 7-mj~00855 
)  Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
^  Assign.  Date  ;  11/13/2017 

^  Description:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 

Tol  ATyTuthorizeJ  law  ehfofceinehf  offlceT . .  . .  ^  ’  ' 

An  appiicatian  by  a  federal  law  enforcenient  officer  or  ap  attorney  for  the  goveiiiment  requests  the  search 
of  the  following  person  or  property  located  in  the  Northern  =  District  of  California 

(ideniijy  the  person  or  describe  the  property  to  be  searched  and  give  its  location): 

See  Attachment  A. 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identljy  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  November  20,  2017  (not  to  exceed  14  days) 

^  ill  the  daytime  6;00  a.m.  to  10:00  p.'m.  □  at  any  time  In  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was,  takeii, 

The  officer  executing  this  wairaht,  or  an  officer  pre.sent  during  the  execution  of  the  wartaiit,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  Warrant  and  inventoiy  to  _ _ Hon.  Beryl  A.  Howell _ . 

(United  Stales  Magistrate  Judge) 

□  Pursuant  to  1 8  U.S.C.  §  3 1 03 a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.G. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  Officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for  _ _ days  (not  to  exceed  30)  □  Until,  thC  facts  justifying,  the  later  specific  date  of  _ _ _ . 

Date  and  time  issued: 

r  Judge ’s  signature 

City,  and  state:  Washington,  DG _  Hon.  Beryl  A.  Hovvelj,  Chief  U.-S.  District  Judge 

Printed  name  and  title 


In  the  Matter  Of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

INFORMATION  ASrtmrtimjgn  WITH  THE  EMAIL 
ACCbUNT^^^^^Hg(3MAILCOM 
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Ad  93  (Rev.  1 1/13)  Searcliand  Seizure  Warrant  (Page _2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

,  Copy  of  warrant  and  inventory  left  with: 

Inventoiy  made  in  the  presence  of ; 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  tliat.this  inyentoiy  is  correct  and  was  returned  along  with  the  original  wairantto  the 
designated  judge. 


Date: _ _ _ _ _ 

Executing  officer 's  signature 


Printed  nanie  and  title 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
^^^^^^H;^ginail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Google,  a  company  headquartered  at  1600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 


1 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  25  of  105 


ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  iii  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  di'aft  emails,  the  source  arid 
destination  addresses  associated  with  each  email,  the  date  arid  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
inciude  full  name,  physical  addreSs,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  oi*  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  infonnation  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  recoi’ds  peitaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  iPcords  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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f. 

g- 

h. 

i. 

j- 

k. 

addresses,  Electronic  Serial  Numbers  (“ESN”)^  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Sei-vices  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

11,  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wire  fraud),  18  U.S.C.  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  611  et  seq.,  involving  Michael  Dean 
Cohen  and  occurring  on  or  after  June  1,  2015,  including,  for  each  account  or  identifier  listed  on 
Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  recoi'ds,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  pr  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  Or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 


All  search  history  or  web  history; 

All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cOOkie  with 
the  accounts; 

All  cookies,  including  third-party  cookies,  associated  with  the  user; 

All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and 

All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documentSj  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  prineipals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  deteimine 
.  'Rhe"gebgfaphic”ahd'ehinnblmgiMl  coRtexf  of  accountmcCess,  use,  and  ev^ 

to  the  crimes  under  investigation  and  to  the  aceount  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  Investigation; 

g.  The  identity  of  tlie  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  sueh  person(s);  and 

h.  The  identity  of  any  person(s) — ^including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of;  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals, 

III.  Review  Protocols 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  conceniing  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  inelude  use  of  a  designated  “filter 
team,”  separate  and  apart  fi'om  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  C 
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AQ93  (Rev.  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court  . .  . 

for  the 

District  of  Columbia 

) 

)  Case:  1;17--mj-00854 
)  Assigned  To  ;  Chief  Judge  Howell,  Beryl  A. 
)  Assign.  Date  :  11/13/2017 
^  Description:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ _ Northern _  District  of  _  California 

(identify  the  person  or  describe  the  property  to  be  searched  andgive  its  location)'. 

See  Attachment  A. 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be.searched 
br  identify  the  person  by  name  and  address) 

INFORM^nO^SSO^TED  WITH  THE  ACCOUNT 
^^■^^^^^^■WHICH  IS  STORED  AT  THE 
^^""PREMISES  OF  T&1  INTERNET,  INC. 


I  find  that  the  affidavitfs),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized)-. 

See  Attachment  B. 


YOU  ARE  GOMMANDED  to  execute  this  wairant  on  or  before  November  20,  2017  (not  to  exceed,  14  days) 

0  in  the  daytime  6:Q0  a.m.  to  10:00  p.m.  Oat  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  pi'operty  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  wairant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  Hon,  .Beryl  A,  Howell _ _  < 

(United  State's  Magistrate  Judge) 

□  Pursuant  to  18  U.S.G.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result. listed  in  18  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
pr.op.eity,  will  be  searched  or  seized  (check  the  appropriate  box) 

CS  for _ days  (not  to  exceed  30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _  • 

Date  and  time  issued:  fl//  i/jrih  eit  y.' 

•  Judge 's  signature 

City  and  state;  Washington,  DC  Hori.  Beryl  A:  HoWell,  Chief  U.S.  District  Judge 

Printed  name  and  title 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant  (Page?) 


Return 


Case  No.: 


Date  and  time  warrant  executed: 


Inventory  rnade  in  the  presence  of : 


Copy  of  warrant  and  inventory  left  with: 


Inventoiy  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


1  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge, 


Date: 


Executing  officer ‘s  signature 


Printed  name  and  title 
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ATTACHMENT  A 


This  warrant  applies  to  information  associated  with  the  eMail 


that 


is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by  l&l  Internet,  Inc.  (“l&l”),  an 
electronic  communication  and/or  remote  computing  service  provider  headquartered  in  Sunnyvale, 
California. 
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ATTACHMENT  B 

I,  Information  to  be  disclosed  by  l&l 

To  the  extent  that  the  infoiTnation  desbribed  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  l&l  (hereinafter  “the  Provider”),  regardless  of  whether  4uch  information 
is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any  emails, 
records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the  Provider,  the 
Provider  is  required  to  disclose  the  following  information  to  the  government  for  each  account  or 
identifier  listed  in  Attachment  A) 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  tire  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  seiwice  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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All  search  history  or  web  history; 

All  records  indicating  the  sei-vices  available  to  subscribers  of  the  accounts; 

All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  vvith 
the  accounts; 

All  cookies,  including  third-party  cookies,  associated  with  the  user; 

All  records  that  are  associated  with  tire  machine  cookies  associated  with  the  user; 
and 

All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),,! 8  U.S.C,  §  1343  (wire  fraud),  18  U.S.C.  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  611  et  seq.,  involving  Michael  Dean 
Cohen,  including,  for  each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to 
the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LUC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business,  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 


f. 

g. 

h. 

i. 

j- 

k. 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Gomranliications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  •  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 

that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  conimuniCated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals, 

in.  Review  Protocols 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  D 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
AccnrUtpH  with  the  Email  Accounts 
l@gmail.com, 


I  Maintained  at 
Premises  ControlledbvGoogRHnc., 
the  Email  Account 

Maintained  at  Premises  Controlled  by 
-QathyJnc^andThe-EmailrAccojmt- 


I  maintained  at 
Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
20I8R00I27 


TO  BE  FILED  UNDER  SEAL 


AGENT  AFFIDAVIT 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  Agent the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states; 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’ s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pursuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 

(the  “MDCPC 

Account”),  and  ^^J^aol.com  (the  ^^^jAccount”)  (collectively,  the 
“Subject  Accounts”).  The  Cohen  Account,  Account,  am 

Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  1  Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbrook, 
Pennsylvania  19087  (“1  &  1”),  and  the^^^Jkccount  is  maintained  and  controlled  by  Oath,  Inc., 
22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  “Providers”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  C  and  D  to  the 
proposed  warrants. 

3 .  As  detailed  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  others  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  Icnowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 


Account”),, 


l@gmail.com  (the  “Cohen  Account”), 


@grnail.com  (the  | 
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my  training  and  experience  concerning  the  use  of  email  in  criminal  activity.  Because  this  affidavit 
is  being  submitted  for  the  limited  purpose  of  establishing  probable  cause,  it  does  not  include  all 
the  facts  I  have  learned  during  my  investigation.  Where  the  contents  of  documents  and  the  actions, 
statements,  and  conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in 
part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

4.  I  have  learned  the  following  about  the  Providers: 

a.  The  Providers  offer  email  services  to  the  public.  In  particular,  Google  permits 

subscribers  to  maintain  email  accounts  under  the  domain  name  gmail.com.  Google  also  allows  a 
subscriber  to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For 
example,  if  a  subscriber  controls  the  domain  name  Google  enables  the  subscriber 

to  host  any  email  address  under  this  domain  name  on  servers  operated  by  Google.  Oath  permits 
subscribers  to  maintain  email  accounts  under  the  domain  name  aol.com.  1  &  1  permits  subscribers 
to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For  example, 
if  a  subscriber  controls  the  domain  name  1  &  1  enables  the  subscriber  to  host  any 

email  address  under  this  domain  name  on  servers  operated  by  1  &  1 .  A  subscriber  using  the 
Providers’  services  can  access  his  or  her  email  account  from  any  computer  connected  to  the 
Internet. 

b.  The  Providers  maintain  the  following  records  and  information  with  respect  to  every 
subscriber  account: 

i.  Email  contents.  In  general,  any  email  (which  can  include  attachments  such 
as  documents,  images,  and  videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form 
in  the  account,  is  maintained  on  the  Providers’  servers  unless  and  until  the  subscriber  deletes  the 
email.  If  the  subscriber  does  not  delete  the  email,  it  can  remain  on  the  Providers’  computers 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 
Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  book.  The  Providers  also  allow  subscribers  to  maintain  the 
equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 


iii.  Subscriber  and  billing  information.  The  Providers  collect  and  maintain 
(typically-unv-erified)identifying^informatiomabout-each-subscriber.including.Tonexample.-name. 


username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“ff  ”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  {e.g.,  active  or  closed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 
including  any  credit  card  or  bank  account  number. 

iv.  Transactional  information.  The  Providers  also  typically  retain  certain 
transactional  information  about  the  use  of  each  account  on  its  system.  This  information  can  include 
records  of  login  {i.e.,  session)  times  and  durations  and  the  methods  used  to  cormect  to  the  account 
(such  as  logging  into  the  account  through  the  Providers’  website). 

V.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 
complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 
search  history  or  web  history  associated  with  the  subscriber’s  account. 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  with  its  e-mail  accounts:  (A)  “Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchat”  or  “Instant 
Messenger,”  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 

othen-in-reaLtime _ ^Oath^also-typically-maintains-Content-ancLrecords-relatingAO-AQL^mstant 

message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 
in  real  time. 

viii.  Preserved  and  backup  records.  The  Providers  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preservation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(f).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pursuant  to  its 
own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pursuant  to  1 8  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 
a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedure. 

6.  A  search  warrant  under  §  27 03  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  2711(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  the  subscriber  of  the  existence  of  the  warrant.  18  U.S.C. 
§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation.  18  U.S.C.  §  2705(b). 


- -  ---- 

8.  On  or  about  July  1 8,  2017,  in  connection  with  an  investigation  being  conducted  by  the 
Office  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (“FBI”)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  warrants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  and  November  13,  2017,  and  emails  in  the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  referred  certain  aspects  of 
their  investigation  into  Cohen  to  the  USAO,  which  is  working  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  the  search  warrants  executed  by  the  SCO,  which  had  already 
been  reviewed  for  privilege.^  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


^  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
pursuant  to  Fed.  R.  Crim.  P.  41 ,  to  review  the  emails  obtained  pursuant  to  the  Prior  Cohen  Account 
Warrants  for  evidence  related  to  certain  additional  conduct  that  was  not  the  focus  of  the  Prior 
Cohen  Account  Warrants.  The  emails  obtained  from  the  Prior  Cohen  Account  Warrants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  the  instant  application. 
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responsive  materials  produced  pursuant  to  the  July  1 8  and  November  13,2017  warrants  (the  “Prior 
Cohen  Account  Warrants”). 

9.  On  or  about  November  7,  2017,  and  January  4,  2018,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account.  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  USAO. 


=This-affidavifras"discussed“belowvis=baseddmpartmn=my:review-ofrthe:pen  registendatambtained- 


pursuant  to  the  November  7,  2017  and  January  4,  2018  orders  (the  “Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  information  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Infoimation”). 

II.  Probable  Cause 
A.  Overview 

1 1 .  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017 
from  new  consulting  work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 
agreed  to  make  a  $3 . 8  million  cash  payment  to  a  third  party,  in  connection  with 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
rmisrepresentationS'-and=materiaLGmissions^C0hen-av0ided=makingrrmQnthly-=payments=.Dn-hiS:r- 
loans,  and  attempted  to  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 
certain  repayment  obligations  worth  millions  of  dollars. 

13.  Based  on  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Wtoants, 
MDCPC  Header  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  (i) 

attorney 

about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  the  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
to  Additionally,  th^||m|m||H||| 

Accoun1^^^^^^^^^^|4ccount  and^^^|i.ccount,  respectively,  to  communicate  with  Cohen 
about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 
the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 
(“LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Bank  (“Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from  their  obligations,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Melrose  about  his  net  worth,  assets, 


availabler_cash,^andTinanciaJ-Outlook3--Specifically„basedommymeview-of-records-maintained- 


Sterling  and  Melrose,  and  public  sources  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-l”)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  loan  payments. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refimance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


^  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in 
value  of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber — ^taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value 
oEtaxhmedallions;was:eonsistently~risingT”Consequentlyj:taxhmedallionloans-^like4he4oansrheld- 
by  Cohen — ^were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files — ^was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $  1 ,375,000,  with  repayment 
due  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  maldng  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  security,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pursue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements.  In  total.  Sterling  agreed  to  lend 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  transferred  45  percent  of  that  debt  to  Melrose.^  Under  the  terms  of  Sterling’s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 


requesUCohen=provided=Sterling-witlra^statement-of=financiaPcondition,Mated*August4Y=201-4 


(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000. From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  loiow  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen — ^who  was  the  direct  obligor  under  the  guarantee  agreements — ^was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  records 
maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  beginning  in  or  around 


^  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (“NCUA”). 

Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1,  2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  making  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  with  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  1  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen — ^which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  which  Cohen  told  Sterling 
-Emplaveer2,^in_sum,ancLsubstance,-about-his„casl]uflow.^problems-an(La.,monthlv„shortfalLo£. 
approximately  $16,000.  In  that  same  email.  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  financial  information  “indicatefd]  a  strong  ability  to  make  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 
in  Cohen’s  monthly  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banlcs.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  Icnow  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans  with  Cohen  by. 
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among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8,  2017. 

g.  I  Icnow  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterliag  Employee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  who  would  agree  to 

assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintaiaed  by 


'Sterlingpas“welEas“the'interviews~with“Sterling“Employee^Eand“Sterling^Employee=52-refereneed 


above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  Icnow  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — and  because  Sterling  was  unfamiliar  with^^B 
Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1, 2017,  Cohen  told  Sterling  Employee- 1,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 

Employee-2  on  or  about  February  22, 20 1 7,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  tenns  of  the  proposed  transaction,  and  noting  the  requirement  that 


02.28.2018 


13 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  49  of  105 


Melrose  agree  to  the  terms.  On  or  about  May  2,  2017, 


emailed  Sterling 


IVccount  to  inquire  about  the  status  of  the  transaction. 


it  the 


1  Account  that 
a  term  sheet 


Employee- 1  from  the^^^^^H 
Sterling  Employee- 1  responded  t(| 

Melrose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending 
shortly. 

i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 
-fmancial-informatiomfrom-the:parties;=©n-or  about=0ctobeji2672O16v:ar^Sterling-employee  emailed 


the 


[Account  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 


proceed  with  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 


froml 


l4ccount,  copying 


lit  th<| 


I  responded  from  the  j 

|4ccount,  that  he  would  send  a  financial  statement  and  tax 
returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Employee-1  emailed  Cohen  to 
request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8,  2017,  Cohen  emailed  Sterling 
Employee- 1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  form  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and 
substance,  that  the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not 
confirmed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities' and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1 , 1  have  learned  that  Sterling  Employee- 1  reviewed  each  line  of  the  May  20 1 7  F  inancial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 


Employee-F,4nrSumTand-substanc65TAat-therMayr20Jr7-EinanGiatStatement-wasTacGurate^ 


k.  On  or  about  August  16,  2017,  Sterling  Employee-1  emailed  Cohen  at  the  Cohen 


Account  anl 


lit  the! 


[Account,  attaching  a  non-binding  term 


sheet  memorializing  the  potential  transaction  between  Sterling,  Melrose,  Cohen,  and 


On  or  about  August  29,  2017, 


emailed  Sterling  Employee-1  from  the 


and/or 


Account,  requesting  that  he  be  included  on  “all  future  e-mails  to^^^^^H 

concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  30,  2017,  Sterling  Employee-1  emailed ||||||||^||||||||||||||||  a^  the 
Account,  Cohen  at  the  Cohen  Account,  and^^l  at  the^^^B'kccount,  and  provided  them  with  a 


revised  term  sheet.  On  or  about  September  5,  2017,  Sterling  Employee-1  sent 


at  the 


[at  the  1 


V.ccount  a 
would  borrow 
was  to 


^^^^^^^^^^■4ccount,  Cohen  at  the  Cohen  Account,  and 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet, 

$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that 
acquire  from  Cohen. 

1.  Aspartofthe  agreement,  according  to  the  term  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banlcs,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars — ^because 
^Cohen-representedmmahelephonemalfwithSterlingdEmployee-l=imsum-and-substaneeythat-he-had= 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^^^xansaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
required  and  requested  additional  financial  statements  for  Cohen  and^^^^^^^^hr  its  credit 
underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017, 
^^^^^^|sent  from  the  Account  to  a  Sterling  employee  a  copy  of 

m^lllllllllllllll personal  financial  statement.  The  financial  statement  lists  the 
Account  as  the  email  contact  for  Additionally,  on  or  about  October  5,  2017, 

Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Account,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  “September  2017 
Financial  Statemenf’). 
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n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
-representedGo-Sterling- that-Gohen=had“amegative:^netTWorthT=GFhe-September=2015rz^EinaneiaL 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings),^ 
$3,200,000  in  real  estate  investments,  and  his  $  1 1 ,000,000  personal  residence  (which,  for  the  first 
time,  he  indicated  was  held  in  trust).  The  September  2017  Financial  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions  and 
some  of  his  real  estate  investment  entities. 

0.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  1  have  also  learned  that  at  or  around  the  time  Cohen  provided 
Sterling  with  these  financial  statements — in  or  around  September  2017 — Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 

^Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whicj^wa^cnnsiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Coher^^^^^^^term  sheet. 
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September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohe]j|^^^^^|transaction  was  favorable  for  the  bank 
-  that  is,  tha'^^^^^^^vould  be  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29,  2017,  Sterling  sent  Cohen  a 
letter  stating  Jhat  he  was  in  default  under  the  loans  (between  Sterling  and  Cohen’s  medallion 
corporations.  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee- 1  on  or  about  January  24, 2018,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen^^^^^f.  transaction,  Cohen  would  “bring  all  pa3mients  up  to  date  as 
well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen-^^^^^Jtransaction,  Sterling 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  Coher^^^^^^J transaction,  however,  did  not  close.  On  or  about  January 
29,  2018^^^^the|^^^^^^^|.ttomey,  emailed  attorneys  for  Sterling  from  the^^|\ccount 
and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  Icnow  that  after  the  Cohen-^^^^^^^deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  (“Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  current”  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 


^and-$750,000-to-bring4he=prineipaldDalaneerto-$-207500^000;=:Cohemalso7Suggested-rev:ised*monthly 


interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approximately  $1 ,750,000),  and  would  need  to  make  larger  monthly  interest 
payments. 


s.  On  or  about  February  1,2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[p]ayment  of  $  1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $L250m.” 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  interview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  current  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  Abont  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Melrose^)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medallion  loans,  make  monthly  interest  payments,  or  pay  past-due  amounts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
flffikstRepxiblicilVanddhemreceiyehjmilhonsjjfffiollarsimpmrpQrterljmsultingpaymentsJnJhese, 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accountant — Cohen  withheld  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Republic  employees,  I  have  learned,  among  other  things,  the  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  eontrols  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  eorporate  entities. 


^  Based  on  my  review  of  a  report  of  an  interview  eondueted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  reeords  in  Sterling’s  possession  were  forwarded  to  Melros^c^hat 
Melrose  eould  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^^^^^H 
transaetion.  Based  on  my  review  of  reports  of  interviews  w|™^™™™mployees,  1  also  Know 
that  Cohen  ealled  employees  at  Melrose  regarding  the  Cohen^^^^^^Bransaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  When  Cohen 
opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions^  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic  Employee-1 


^enteredMnto-aMormi 


-5=Cohen=stated,Mn=sum”and=substanee,^-that=he^waS"Opening-Essential 


Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income — separate  from 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive — and  does  not  appear  to  have 
received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 
received  substantial  payments  from  foreign  sources. 

c.  First,  on  or  about  October  27,  2016 — ^the  day  after  he  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 
attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


’  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

*  First  Republic  Employee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel,  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  rather  was  a  “settlement”  payment  made  to  Davidson’s 
client.  ^  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair  with  Donald  Trump.  On  or  about  February  13,  2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

==r==-™:=z;dTr:::-:Seeondyiknow:J&om:myrre¥i©w-o£Eirst~Republic;bank"recordsThatwere  scheduled- 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real -estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  EEC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  EEC. 

^  Specifically,  I  have  learned  from  my  review  of  banlc  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  from  a  home  equity  line  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Los  Angeles;  and  on  or  about  November  1,  2016,  a  wire  transfer  in  the  amount  of 
approxuuately  $96,645  was  made  from  Davidson’s  account  to  a  bank  account  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5, 2017,  Cohen  began  receiving  pajnnents  from 
Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”).  Between  April  2017  and  January 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
'reeeivingwvire=paymentsdrom=a%ank^aec0unCassoGiatedw?ithAheAelecommunieations-GGmpany- 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAF’).  KAJ  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbanlc,  a  Kazakhstani  banlc.  The  listed  account 
holder  at  Kazkommertsbanlc  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Jnv  BTA-JOJ  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W7NDD 
08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  31,  2017  to  on  or  about  January  10,  2018, 
the  Essential  Consultants  Account  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 


^Cohen-was^the^oniy=authorized-^signatory-omthe^accounfc^Among=otherAhingS7=the“MDC&A: 


Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Account  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accounts  to  Sterling  during  the  negotiations  with  respect  to  the 
•ansaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Warrants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration.  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 
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a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  the  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1,  2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbursed 


Threugh-eight;$T50yQ00TinstallmentSzbetweemMay=20U7-andrDeeemben2Ql-7— 


b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  from  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Bank.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  February  1 3, 20 1 7,  Cohen  emailed  an  AT&T  employee  from  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants] ’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my 
review  of  reports  of  interviews  with  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 

d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
Administration. - - :  - - ^ 


e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would 
“jointly  represent  clients.” 

18.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 


provided  by  Getzel,  and  my  review  of  notes 
have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  a  law  firm  in  Manhattan,  New 
York.  At  the  meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice 
called  Michael  D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants 
LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wi'ote  that  “[a]ttached  is  a  draft  of  the  newPFS  as  of  September  30, 2017” 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  draft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt.  In  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 


thahthe'finanGiahstatemenCdidmot'list  any'assets=associated-with“either-the=EssentiaFConsultants- 


Account  or  the  MDC&A  Account:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D.  Cohen  &  Associates  POC  [5/c]  and  Essential  Consultants  LLC.  Please  advise  whether 
or  not  these  should  be  disclosed  and  what  value.” 

c.  On  or  about  October  6, 2017,  Cohen  called  Getzel  by  telephone — ^which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[IJooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  from  my  review  of  bank  records  and  emails  sent  by  Cohen 
to  Sterling,  I  Icnow  that  the  September  2017  Financial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Account  or  the  MDC&A  Account.  As  of 
September  30,  2017 — ^the  date  of  the  September  2017  Financial  Statement — Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the  MDC&A 
Account.  As  of  October  6, 2017,  the  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
.MD-C&A-AccountJfom-Sterling-an(lMelrose,itappears_that_Cohemalso„substantialLyiunderstate(L.- 
his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
from  my  review  of  the  account  schedule  and  banlc  records,  I  have  learned  the  following; 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.18  in  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic. 


02,28.2018 


28 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  64  of  105 


e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30,  2017. 

f.  As  of  September  30,  2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife — and  the  total  balance  across  the  two  accounts  as  of  September  30,  2017  was  $300,096.72. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $5,014,051.80  in  his  accounts 
at=CapitaU0ne-Banfc,^Signature-Banfc^:  TD-Bank7=Bethpage-Credit-Unionp:EirsURepublie;-and 
Morgan  Stanley. 

2 1 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  from  Sterling  and  Melrose  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Melrose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agreement  With 


22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 


sell  his  interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 


negotiated  with 


it  appears  that 


agreed  to  pay  an  above-market  price  for 


Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay 


pproximately 
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$3.8  million  in  cash.  Specifically,  fi-om  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee- 1,  as  well  as  my  participation  in  an  interview  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 

Employee- 1  to  Cohen  and^^^^^^  See  supra  14(k).  According  to  the  term  sheet, 
^^^^^^■vould'borrow#205OOO=OOO-from-Sterling-and-Melrose=to-be  secured-bythe^medallions 
that  imilllllllllllvas  to  acquire  from  Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,913  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  to  ^^7  other  form  of  payment  or 

financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 

describing  the  terms  of  the  Cohen-’'^^^^^|transaction  and  the  new  loan  to  ^^^^^^^^|did 
not  mention  any  pa}ments  from  Cohen  to  including  a  $3.8  million  payment.  The 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee- 1  and  Sterling  Employee-2,  they  were  never  told  tha1 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  malce 
any  payment  to 


agreed  to  a  purchase 
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23.  While  Cohen  did  not  disclose  any  payment  from  Cohen  to 

^^^^^Hin  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 

Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 

^entitledF^Sale^-oFlS[¥&Medallion=Entities=and=BebGAssumption^(the"Getz&FMemorandum7-).- 

The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  andj 
in  part,  as  follows;  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^^ 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

payment  of  $3,800,000  to  but  Getzel  did  not  know  where  Cohen  was  goirig  to  obtain 

$3,800,000  to  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1 .25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  repoits  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^^^^|was  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen  to] 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  2015,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
In  the  course  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/or  MDCPC 
Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 


undisclosed— side-payment -witi 


at-.thel 


Ikccount,  and  1 


at  thi 


^^|-Account,,_^^^ 
Account.  Specifically, 


as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohen  JUm||  transaction  with  Sterling: 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  principal  amount  of  the  loan,  see  supra  Tf  14(g),  to  send  teim  sheets  to  Sterling,  see  supra  f 
14(j),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  Tf 
16,  to  send  financial  statements  to  Sterling,  see  supra  Tf  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  Tf  14(n),  to  negotiate  a  reduction  of  his  debt  with 
Sterling  on  or  around  January  31,  2018,  see  supra  Tf  14(o),  to  tell  Sterling  on  February  1,  2018,  he 
does  not  have  the  ability  to  pay  more  than  $  1 ,25 0,000,  see  supra  If  1 4(p),  and  to  communicate  with 
individuals  responsible  for  sources  of  pa)ments  to  the  Essential  Consultants  Account,  see  supra  f 
15.  In  other  words,  from  the  communications  described  above,  it  appears  likely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 


(has  used  the 


Ikccount  to  communicate  about 


the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 
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as  October  2016.  See  supra  Tf  14(g).  Specifically,  as  described  above,  as  early  as  May  2,  2017, 

Account  to  inquire  about  the  status  of  the  transaction, 
see  supra  Tf  14(h).  He  used  the  ||||||||[|||||||||||||||^^  to  exchange  drafts  of  the  proposed  term 

sheet  with  Cohen.^^^|and  Sterling,  see  supra  Tf  14(j).  The  .^^^^^^^^^Account  was  also 
used  by  send  a  personal  fmancial  statement  foi^^^^^^^^^|to  Sterling, 

see  supra  Tf  14(1).  The^^^^^^^^^^Account  was  copied  on  emails  from  the . 
"Aecounfrab0ufrthu-transactionv  s'ue'^Mj7ra~^M-4(i)i^and  -wasHisted=on-^^^^^^^B -financiaH 
statement  as  the  contact  email  supra  Tf  14(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  Icnow  that  on  or  about  September  1,  2017 — at  or  around 
the  time  and  Cohen  were  negotiating  a  term  sheet-^^^^^^^^^|used  the 

l^ccount  to  send  and  receive  eight  emails  from  Cohen  at  the  MDCPC  Account, 
lias  used  the^^^^mcount  to  communicate  with  Sterling  employees,  Cohen, 
and  jibout  the  proposed  taxi  medallion  transaction  since  at  least  December  2016. 

See  supra  14(g),  24(c).  Specifically,  on  or  about  August  29,  2017,^^^|old  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  Tf  140. 
Additionally,  ^^^|vas  involved  in  making  revisions  to  the  parties’  term  sheets,  and  he  told 
Sterling  on  January  29,  2018  that|^^|^^|TOuld  not  go  forward  with  the  planned  transaction, 
see  supra  ^  140,  (n).  Accordingly,  there  is  probable  cause  to  believe  that  the  ^^^Account  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  payment  from 
Cohen  t  and  the  reasons  for  the  collapse  of  the  Cohen-^^^^^Htransaction. 


For  instance,  from  records  provided  by  Sterling,  I  know  that  on  or  about  December  2, 
2016.^^^^^^^^^Hsent  an  email  to  a  Sterling  emplove^^ing  the  | 

Account.  The  email  forwarded  correspondence  between^^Bjwho  was  using  1 
Account,  and  an  employee  of  Capital  One  regarding  extending^^^^^^^^^^H^an  with 
Capital  One. 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Aeeount  to  receive  emails  he 
.  was  previously  receiving  at  the  Cohen  Aeeount.  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5,  2017,  Cohen  sent  an  email  from  the 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  ealls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 


montaefandmommunieationsf^Mhe-signaturedine  omthe-emaiHisted=“Essentiat  Consultants^DPC^ 


and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Aeeount  as  the  email  address. 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Aeeount  produeed 
pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Aeeount  to  send  and  reeeive  emails  from  the  Cohen  Aecormt,  to 
eommunieate  with  the^^^|;\ccount,  and  to  send  and  reeeive  emails  from  other  email  aecounts 
about  his  politieal  eonsulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  that  since  the  November  13,  2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  eontinued  to  send  and  receive  emails  at  the  MDCPC  Aeeount  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subjeet  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Aeeount  Warrants,  as  well  as  the  MDCPC  Header  Information  have  revealed  the 
following: 


a.  On  approximately  eight  oecasions  in  August  and  September  2017,  while  Cohen, 
^^^^^^Hvere  communieating  about  a  term  sheet  for  the  Cohen-^^^^^^Htaxi 


Based  on  my  review  of  emails  from  the  MDCPC  Aeeount  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  the  aeeount  to  eommunieate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attomey-elient  privilege,  including  some  of  the  individuals  described 
below.  See  infra  Tf  27. 
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medallion  t'ansaction,  see  supra  14(k),  Cohen  used  the  MDCPC  Account  to  send  or  receive 
emails  fron^^^^at  the|^^|\ccount.  For  instance,  on  or  about  August  22,  2017,^^Jiised 
the^^^|kccount  to  send  an  email  to  Sterling  Employee- 1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day.  Sterling  Employee- 1  responded  the 

and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22,  2017,  Cohen  also  used  the  MDCPC 
Account  to  send  an  email  to  Sterling  Employee- 1 . 


“br^Aff  no  ted“ahove7"omor  ahout-S  eptemher  4y=2  0  C  ohen-useddhedMD  CP  C  AccounC 


to  send  or  receive  eight  emails  with  the  l^^^^^^^^HVccount. 

c.  Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  political  consulting  agreement.  For 
example,  beginning  in  April  2017 — ^the  same  month  when  Cohen  began  receiving  payments  from 
AT&T,  see  supra  16(d),  17(c) — Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  from  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017 — ^which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  16(d),  17(d) — 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novartis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 
assistance  on  an  initiative  relating  to  drug  pricing. 

d.  From  my  review  of  the  MDCPC  Pleader  Infonnation,  I  have  learned  that  Cohen  has 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appears  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Account  was  used  to  send  and 
receive  emails  from  accounts  belonging  to  individuals  using  @novartis.com  email  addresses. 
Since  November  15, 2017,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.kz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Banlc,  see  supra  16(d),  17(b),  and  @squirepb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  law  firm  Squire  Patton  Boggs — ^both  of  which  Cohen  appears  to  have  a 
consulting  relationship  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra  ^ 
9,  it  appears  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  (z.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the 

Account,  the^^J  Account,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 
has  revealed  the  following: 

a.  Emails  sent  by  the  Cohen  Account  to  the  :^^^|\,ccount  on  or  about  December  1 8, 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  January  3, 

2018  at  8:01  a.m.,  January  3,  2018  at  2:56  p.m.,  and  January  4,  2018  at  3:31  p.m. 

b.  An  email  sent  by  the  Cohen  Account  to  Account  on  or  about 

January  25,  2018  at  8:55  p.m. 
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c.  Emails  from  the  Cohen  Account  to  the  email  account^^^^^^^^^^^l  on  or 
about  December  1,  2017  at  2:14  p.m.,  December  29,  2017  at  10:20  p.m.,  January  2,  2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 
emails  contained  in  the  Cohen  Account,  1  have  learned  thatthe^^^^^^^^^^^t  email  account 
belongs  to  Jeffrey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

:r3~..r.-T=:^=:=-(jy=:gjnu:its'^^fromAhe^CohenA;econntto^emaihaeeounts%elonging^to“Sterhngemptoyee^^ 
including  Sterling  Employee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at  5:30  p.m.,  January  29,  2018  at  8:29  p.m.,  January  30,  2018  at  6:44 

p.m. 

e.  An  email  sent  from  the  Cohen  Account  to  the  email  account 
clientserviceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 

f.  Numerous  emails  sent  from  the  Cohen  Account  to  the  email  account 
including  emails  on  or  about  December  4,  2017  at  2:17  p.m.  and  January  29, 

20 1 8  at  5 :43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 

1  believe  that  the  email  belongs  to 


29.  Based  on  my  review  of  records  maintained  by  Sterling,  1  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen-^^^^^^l  transaction. 


Based  on  my  training  and  experience,  1  Icnow  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  1 
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also  know,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 

"^ntaiiFevttmeeT-elate(itnthe-SubjeT;F©ffen^^^^^  - - 

30.  Thus,  I  respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 

witbjmH^l^^mimillimilllllllHHprimarily  the  Cohen 

MDCPC  Account,  I  Irnow,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  thj^^^^^^^^^l^ccount,  ^^^^^^^^^^Account  and^^^|A.ccount  or 

about  October  1,  2016 — ^the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — ^will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
above — such 

omissions  to  financial  institutions. 
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3 1 .  Temporal  Limitation.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attachments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  from  the  Cohen  Account  that  were  sent,  created,  or  received  before  November  14,  2017. 


Thismpplic*ation=also~seeks=^Gther-infonnatrGn=speGifiedmbove=assoGiated'witfrthe-CGhen^GGounfr 


that  was  created  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  from  the  MDCPC 
Account  that  were  sent,  created,  or  received  before  November  14,  2017. 

For  the^^^^^^^^l  Account  and'l^mUjHAccount, 
seeks  emails  and  all  other  content  information  specified  above  sent,  created,  or  received  between 
October  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  October 
20 1 6  is  the  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale  with  the 

d.  For  the  Account,  this  application  seeks  emails  and  all  other  content 

infonuation  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  2016  is  the  month  in  which^^H 
began  representing  the^^^^^^^|in  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  1  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Cohen  Account  will  contain  evidence. 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  II  of  Attachment  A  to  the  proposed  warrant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 


-and/or-rtaximedaUionsi . 


c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or  entities 

associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^|^^^^^rnd/or  entities  associated  with  him; 

f  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
"accessed-or~usGd~tO'determinG4he^geographic^and-ehr0nologieateontext-oEaccount“aeeess^use;=^ 

and  evGnts  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  it 
relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  1  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  th 

Account  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of  the  Subject 
Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  th|^^^^^^^^|^ccount  and|||H||||H||||||||^| 
Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tc 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
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communicated  with  the^^^^^^^^^^HAccount  and  ^^^^^^^^^^^|Account  about  any 
matters  relating  to  any  plan  or  proposal  or  agreement. for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
and/or  entities  associated  with  him; 

d.  Communications  between  the  Account  ani 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Melrose,  or  other  financial 

^-^=-mstitution(s)^regarding^Cohen-s-finances;=-----=-^^^^==^--=— - ^ 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the 

^^^^^^^Account  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 
of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  the^^^^^^^^^^^ccount  and 
owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the  ^^^Account  will  contain  evidence, 
fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  th( 


Account; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^^^|ind/or  entities  associated 
with  him; 


c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 


communicated- with^the  I 


KcGount“about=any=matters^relating=tO:=any-:plan^  or^proposakor - 


agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions. 


and  any  associated  debts  or  liabilities,  t(^^^^^^^^^^|md/or  entities  associated  with  him; 

d.  Communications  between  the^^J^ccount  and  others,  including  employees  or 
representatives  of  Sterling,  Melrose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 


e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

III.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  directed  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  the  government,  attorney  support 
staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 


loGatemvidenGepfruitSf  and-instrumentalities-o£the-Subjeet0ffenses5-inGluding-butrnofrlimited4o. 


undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  unique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 


do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

37.  Because  Cohen  and^^^are  attorneys,  the  review  of  the  content  within  the  Subject 
Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

IV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Gohen-thathensmndernnvestigationjrnausing:rhimAQ-Aestroy^_evidence,--fle&-&Qni-prosecutipn,mr., 


otherwise  seriously  jeopardize  the  investigation.  In  particular,  based  on  my  experience 
investigating  white  collar  cases,  including  cases  featuring  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  1 8  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordingly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  1 8  U.S.C.  §  2705  (b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  peimiitted  without  further  order  of  this  Court  to  provide  copies  of  the  warrant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
§^2-703  (-b)(4-)(A4(for-CQntente)^and^§-2703(c)(l-)(AX(for-records-an(Lother--infonnation),-and-the 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41. 


Special  Agent  Mason  Posilkin 
United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 
28th  day  of  February,  2018 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l^gmail.com, 

11 

|i,  Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 


TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
■  Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agen^^^^^^^^^^of  the  United  States 
Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^^|@gmail.com^^^^|^gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 


2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
-existencemfthisAVarranfand^0rder::to4hedisted::Subseribe&orto..-anyrOther~persomfoEra^perio4of 


180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
l@gmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  of  this  warrant, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  addi'ess,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 


-^with-the-Subjeet-Aecountpineluding  complaints, -inquiries7or=other~eontaets=with-supportserviees 


and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1,  2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

in.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  ofviolations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  orto  defraud 
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the  United  States),  1005  (false  banlc  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (banlc  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

3:_  -^-=-GF'^CommuniGations=recordsf“documentspand=Gther^filesfinvolving  a^planwproposaVon 


agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 

land/or 


medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  t(j 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others. 


including  t< 


Imd/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

r7—^:zr:i:;==Evidenee4ndieatingAhe"SubjeeEAeeount"Owner=S-^-intent:ras-it-relates-toAhe 'Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  addi'ess 
potential  privileges. 
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Email  Search  Attachment  B 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
account:^^^|@gmail.com  and  |||mm||||||||||mthe  “Subject  Accounts”)  for  the  time 
-perio(lbetweemQctober^l,-2016-and-theMate^o£this^warrant,_mcIusive -  - 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts; 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 

■wdTecordsmf^aetroffsAaken~=-"-=^^  - - 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  insti-umentalities  of  violations  of  1 8  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  banlc  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 


02.28.2018 


2 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  90  of  105 


b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 

"communieated“^withd;he-SubjeGt-Aeeounts^abouCany-matters-relating^to^any=plan-on^proposalor- 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tc^^^^^^^^^^^and/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Banlc,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
^^J@aol.com,  Maintained  at 
Premises  Controlled  by  Oath,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 


TO:  Oath,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”)  . 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  |m|||||mm||  of  the  United  States 
Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account^^|@aol.com,  maintained  at  premises  controlled  by  Oath, 
Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachment  C 
hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies, 
within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II 
of  Attachment  C  hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in 
Sections  Ell  and  IV  of  Attachment  C.  The  Government  is  required  to  seiwe  a  copy  of  this  Warrant 
and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be 
served  via  electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of 
accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 


neGessaryi'exceplFthat“ProvideFmay~disclose=this=WarranCand-Order4o^an^ttomey  for-Providen 


for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  C 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Oath,  Inc.  (the  “Provider”),  headquartered  at  22000  AOL  Way, 
Dulles,  Virginia  20166,  and  applies  to  all  content  and  other  information  within  the  Provider’s 
possession,  custody,  or  control  associated  with  the  email  account ^^|@aol.com  (the  “Subject 
Account”)  for  the  time  period  between  December  1,  2016  and  the  date  of  this  warrant,  inclusive. 
^^^,__^A-law-enforcementmfficer^wilTservethis-warrant-by-transmittingmt.via-emaiLor.^  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  infoiTnation  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  t)q)es  of  services  utilized,  means  and  source  of  pa)mient,  and  payment  history. 
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d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f  Search  History.  All  search  history  and/or  web  history. 


=gr^PrByei»"VB#o/'-fee^wp)-rec0if^r/.s'FAny-preserved-OFbaekup-copiesmPanymfthe:foregoing~ 


categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  govermnent,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C. §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  banlc  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^^|md/or  entities  associated 
with  him; 
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c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  and/or  entities  associated 

with  him; 

-^=^^=dF=Communications“betweenA;he  “  Subj  eGbA;GcOunt-and- others,Mneluding=employe&s“or=' 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances;  and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
maintained  at 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00I27 


WARRANIW^INT)  N©N=DIS€L©SHRE-©RDER-  = 


TO:  1  &  1  Internet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account  maintained  at  premises  controlled  by  1 

&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in 
Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 
Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  II  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  required  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  wan'ant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 

~neeessarypexcept-that-Provider:rmay=diselose-this-Warranfrand.OrdentG^amrattomey-fer-Provider;r 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated;  New  York,  New  York 


Date  Issued  Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  D 
1.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Internet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
(the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 
and-the-datemLthis.-warrant,dnclusive _ _ _ _ _ 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
infonnation  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 


and'recordsmPaetionshakenT^ 


f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Banlc,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 


02.28.2018 
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medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  ti 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 
'person(s)  — who^TOminunic'ated"with~th'e-Subjeet=Aceount-abouCany^m:attersu:elatingi;o'=Essentiah 

Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  t(^^^^^^^^^|and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 


and/or 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 
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AO  93  (SDNY  Rev.  05/10)  Searclrand  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

A  Device  Containing  the  Resuits  of  Three  Email  Search 
Warrants,  See  Attachment  A 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

A  Device  Containing  the  Results  of  Three  Email  Search  Warrants,  See  Attachment  A 


IgKtAG  169  7 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 

'  ('nnf  tn  prr.pp^  14 


property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 
□  in  the  daytime  6:00  a.m.  to  10  p.m. 


(not  to  exceed  14  days) 

Sf  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 
established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken.  ,  -  ;  .  '  *■ 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to  the  Clerk  df  the  Court. 

^  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the.’Cldrk  of  the  Court. 

y  ‘  A  '  ■  ^  USM^, Initials 

ST  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U^S.C.  §  '2705 '(except  fqr.delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person,  who,  of  Aose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  pffor  30  days  (not  to  exceed  30).  T  '  *  '  •  . 

□until,  the  faptS)iustifying,  the  late^specific  date  of 

fik  If, 


Date  and  time  issued: 


City  and  state:  New  York.  NY 


Hon.  Gabriel  W.  Gorenstein.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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Attachment  A 


I.  Device  to  be  Searched 

The  device  to  be  searched  (the  “Subject  Device”)  is  described  as  a  black  and  red  USB  drive 
with  a  white  label  that  says  “Tracking  #:  180208140208”,  which  contains  emails  and  other  content 
information  obtained  pursuant  to  the  three  search  warrants,  numbered  17-mj-00503,  17-mj-00855 
and  17-mj-00854,  obtained  by  the  Special  Counsel’s  Office  (“SCO”),  less  the  emails  that  were 
screened  and  removed  by  the  SCO’s  privilege  team. 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Device  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the  United 
States),  1005  (false  hank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”),  as  listed  below: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 


b.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  and/or 

entities  associated  with  him; 

c.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 

person(s)  -  who  communicated  with  ^^^^^^^l^gmail.com  and/or  (the 

“Subject  Accounts”)  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^^|and/or  entities  associated  with  him; 

d.  Communications  between  the  Subject  Accounts  and  Jeffrey  Getzel  relating  to 
Michael  D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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e.  Evidence  indicating  the  owner  of  the  Subject  Accounts’  intent  as  it  relates  to  the 
Subject  Offenses  under  investigation. 
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UNITED  STATES  DISTRICT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Wan-ant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
^^^^^^^|@gmail.com, 
^^^|@gmail.com,  and 

Maintained 

Premises  Controlled  by  Google,  Inc., 
US  AO  Reference  No.  2018R00127 


2877 

TO  BE  FILED  UNDER  SEAL 
AGENT  AFFIDAVIT 


Agent  Affidavit  in  Support  of  Appli^tion  for  a  Search  Warrant 
“  for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 
Special  Agent 


lof  the  United  States  Attorney’s  Office  for  tire  Southern 


District  of  New  York,  being  duly  sworn,  deposes  and  states; 


1.  Introduction 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 


previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  201 1  to  August  2016.  In  the  course  of  my  experience  and  Gaining  in  these 
positions,  I  have  paiticipated  in  criminal  investigations  into  federal  offenses  involving  a  wide  airay 
of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  seai'ch  of  email  accounts. 

2.  I  make  tliis  affidavit  in  support  of  an  application  for  a  search  wan'ant  piusuant  to  18 


U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 

l@gmail.com,  and  Subject 

Accounts”),  maintained  and  confrolled  by  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 


)gmail.com, 
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Ainphitheatre  Parkway.  Mountain  View,  California  94043.  The  information  to  be  searched  is 
described  in  the  following  paragraphs  and  in  Attachments  A  and  B  to  the  proposed  warrant. 

3.  On  or  about  February  28.  2018. 1  submitted  an  Affidavit  in  support  of  an  application 
for  a  search  wanant  pursuant  to  18  U.S.C.  §  2703  for  all  content  and  other  infoimation  associated 
with  the  Subject  Accounts  maintained  and  contiolled  by  the  “Provider,  a  true  arf  correct  copy  of 
which  is  attached  hereto  as  Exhibit  A  (the  “Original  AfBdavif),  and  which  is  kaiorporated  by 

.  ,  I 

reference  as  if  fully  set  forth  herein. 

4,  OnThat  same  date,  the  Honorable  Gabriel  W.  Gorenstein,  United  States  MagisUate 
Judge,  issued  a  search  wan  ant  for  the  requested  data,  a  true  and  correct  copy  of  which  is  attached 
hereto  as  Exhibit  B  (Uie  “Original  Search  Warrant").  Shortly  thereafter,  the  Provider  was  served 
with  the  Original  Search  Warrant.  On  or  about  March  7, 2018,  the  Provider  provided  a  response 
to  the  Original  Search  Wairant.  That  return  was  incomplete  because  the  Provider  declined  to 
produce  data  that  it  stored  on  computer  servers  located  outside  of  the  United  States.  It  is  my 
understanding,  ftom  speaking  with  the  Assistant  United  States  Attorney  assigned  to  this  matter  as 
well  as  other  law  enforcement  agents,  that  the  Providefs  refusal  to  provide  foreign  stored  data  was 
in  light  of  the  Second  Circuit’s  decision  in  which  it  held  that  Microsoft  Corporation  was  not 
required  to  produce  foreign  stored  data  puisuant  to  a  warrant  issued  under  the  Stored 
Communications  Act.  Sea  Matter  of  Warrant  to  Search  a  Certain  E-Mail  Account  Controlled  and 
Maintained  by  Microsoft  Corporation.  829  F.3d  197  (2d  Cir.  2016),  cert,  granted  138  S.  Ct.  356 

(2017)  (the  “Microsoft  Litigation”)- 


■The  Original  Affidavit  also  sought  content  infoimation  for  two  additional 

by  dtfferlit  providers.  Tliis  affidavit  only  requests  a  search  warrant  witlr  respect  to  the  Subject 

Accounts  described  herein. 


20  J  7.03.25 
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5.  On  March  23,  2018,  the  Clarifying  Lawful  Overseas  Use  of  Data  Act  (the  “CLOUD 

Act”)  was  enacted  and  became  law.  The  CLOUD  Act  clai'ifies  that  in  responding  to  legal  process 

issued  under  the  Stored  Communications  Act,  providers  ai'e  required  to  disclose  data  even  if  it  is 

stored  abroad.  Specifically,  section  103  of  the  CLOUD  Act  amended  18  U.S.C.  §  2713  as  follows: 

§  2713.  Required  preservation  and  disclosure  of  communications  and  records 
A  provider  of  electronic  commimication  service  or  remote  computing  service  shall  comply 
with  the  obligations  of  this  chapter  to  preserve,  backup,  or  disclose  tlie  contents  of  a  whe 
or  elechonic  communication  and  any  record  or  other  infoimation  pertaining  to  a  customer 
or  subscriber  within  such  provider’s  possession,  custody,  or  conhol,  regardless  of  whether 
_  such  communication,  record,  or  other  information  is  located  within  or  outside  of  the  United 
States. 

6.  From  my  backgi'ound,  b-aining,  and  experience  in  this  investigation  and  in  others,  1 
know  that,  in  general,  any  email  (which  can  include  attachments  such  as  documents,  images,  and 
videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form  in  the  account,  is  maintained 
on  the  Provider’s  servers  unless  and  until  the  subscriber  deletes  tlie  email.  If  the  subscriber  does 
not  delete  the  email,  it  can  remain  on  the  Provider’s  computers  indefinitely.  Even  if  the  subscriber 
deletes  the  email,  it  may  continue  to  be  available  on  tlie  Provider’s  servers  for  a  certain  period  of 
time.  In  addition,  from  my  review  of  other  search  wairant  returns  in  this  investigation,  I  loiow  that 
the  subjects  of  the  investigation  maintained  email  data  relevant  to  the  investigation  in  email 
accounts  for  many  months  after  the  email  was  sent  or  received. 

7.  Accordingly,  I  respectfully  submit  this  Affidavit  seeking  the  issuance  of  the  attached 
proposed  seai'ch  waiTant  which  seeks  the  same  data  as  was  sought  in  the  Original  Seaich  Wan-ant, 
for  the  reasons  set  forth  in  the  Original  Affidavit  and  herein. 

II.  Request  for  Non-Disclosure  and  Sealing  Order 

8.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 

As  a  result,  prematme  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert  target 

3 
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subject  Michael  Cohen  that  he  is  under  investigation,  causing  him  to  destroy  evidence,  flee  from 
prosecution,  or  otherwise  seriously  jeopardize  the  investigation,  hi  pailiculai',  based  on  my 
experience  investigating  white  collar  cases,  including  cases  featuring  documents  such  as 
agreements,  diafts  of  agreements,  notes  of  conversations,  and  other  documentary  evidence, 
premature  disclosure  of  an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to 
destroy  or  conceal  such  evidence.  In  addition,  as  set  forth  in  the  Original  Affidavit,  Cohen  uses 
computers  and  electronic  communications  in  furtherance  of  his  activity  and  thus  could  easily 
delete,  encrypt,  or  otherwise  conceal  such  digital  evidence  fr’om  law  enforcement  were  he  to  learn 
of  tlie  Government’s  investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the 
financial  means  that  would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

9.  Accordingly,  there  is  reason  to  believe  that,  were  the  Provider  to  notify  the  subscriber 
or  others  of  the  existence  of  the  waiTant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  1 8  U.S.C.  §  2705(b),  I  therefore  respectfully  request  that  the  Court  dfrect  the  Provider 
not  to  notify  any  person  of  the  existence  of  the  wanant  for  a  period  of  180  days  fr'om  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

10.  For  similai-  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  othemise,  except  that  the  Government 
be  permitted  without  further  order  of  this  Court  to  provide  copies  of  the  wanant  and  affidavit  as 
need  be  to  personnel  assisting  it  in  tire  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 
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HI.  Conclusion 

11.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrant  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
§  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41 . 


United  States  Attorney's  Uttice 
Southern  District  of  New  York 


Sworn  to  before  me  this 
^77^  day  of  April,  2018 

KONORA^E  HENRY  B.  PITMAN 
United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Exhibit  A 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


bi  the  Matter  of  a  Wan’ant  for  All 
Content  and  Other  Information 


A  ocnriatffd  ^th  the  Email  Accounts 
l@gmail.com, 
l@gmail.com,  and 

Maintained  at 

Premises  ConhoUe^js^ooele^c., 
the  Email  Accoum^^HH^I 
Maintained  at  Premises  Controlled  by 
Oath,  Inc.,  and  the  Email  Account  — 
niaintained 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 


20I8R00127 


TO  BE  FILED  UNDER  SEAL 
AGENT  AFFIDAVIT 


Agent  Affidavit  m  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORIC  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  Agent  the  United  States  Attorney’s  Office  for  the  Southern 

District  of  New  York,  being  duly  sworn,  deposes  and  states: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’ s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  JBnancial  crimes,  including  frauds  on  fruancial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accouirts. 


B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pursuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  infoimation  associated  with  the  email  accounts 


l@gmail.com  (the  “Cohen  Account”), 


Account”), 


l^gmail.com  (the  -"^^^^^^^^^|4ccount”), 
^^^^^^^^■4ccounP’)>  anr^^l^aol.com  (the 
“Subject  Accounts”).  The  Cohen  Account, 


(the  “MDCPC 
(the 

B\ccount”)  (collectively,  the 
xcount,  and! 


Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  Califoniia  94043  ("Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  1-Ihtemet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbi'ook, 
Pennsylvania  19087  (“1  &  1”),  and  Account  is  maintained  and  controlled  by  Oath,  Inc., 

22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  ‘Troviders”).  The  information 


to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  C  and  D  to  the 


proposed  warrants. 

3 .  As  detai  led  below,  there  is  probable  cause  to  believe  that  the  Subj ect  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  finud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  ("Cohen”)  and  otlrers  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  Icnowledge,  my  review  of  documents  produced  pm'suaat  to 
grand  jury  subpoenas  and  prior  search  wan'ants,  my  review  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enfoi  cement  officers,  as  well  as 
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,  fo,  «>e  wed  pu^ose  of  ..blishtas  p.obab,.  oaua.  it  does  not  ntoWe  ail 

^eftctsIbaveieat..eddwing.yinvesagadon.Whetedtocont«ttsofdoo— ^ 

^„ents,  and  oonvetsations  of  otbets  aso  tepotted  hetein.  ate  tepotted  ta  —  and  n. 

part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

_  _4  I  have  learned  tire  foUowing  about  the  Providers;-  - 

,  The  Ptovidets  offer  email  services  to  to  pubiio.  In  pattioular,  Google  pemrits 

snbscribers  to  maintain  email  accounts  under  to  domain  name  gmail.conn  Google  also  allows  a 

'  to  maintain  email  accounts  under  any  domain  name  under  to  subsoribefs  contml.  For 

Google  enables  the  subscriber 

example,  if  a  subscriber  controls  the  domain  nam<^^^^^g 

ro  host  any  emaU  add, ess  under  this  domain  name  on  servers  operated  by  Google.  Oad.  permits 

,nbseribers,o™htminemaiia^untsundm.todomahtnamcaoi.oom.,.,permitssubs^^^^^^^ 

m  mainrnin  email  ac^tm.  mtder  any  dommn  name  .under  to  subscriber's  eonhol.  For  examp  e. 

1  &  1  enables  the  subscriber  to  host  any 

if  a  subscriber  controls  the  domain  name 

amail  address  under  dds  domain  name  on  servers  opemmd  by  1  ^  1.  A  subscriber  nshtg  to 
P^viders’  services  can  access  his  ot  her  email  account  ffom  any  e^rputet  oomteoted  to  to 


Internet. 


Pmvidets  maintain  thefellowingteeords  and  infonnaUonwithtespecttoever^ 


b.  The 
subscriber  account: 

i,  .  in  general,  any  emaU  (which  can  inelnde  attachments  such 

as  doeumen.,  Images.'  and  videos)  sent  to  or  ftom  a  subsatofs  aoconnh  or  stored  in  draft  form 
in  to  account,  is  matatained  on  to  Provide, s'  servers  ndess  and  until  to  subsettot 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 

Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  book.  The  Providers  also  allow  subscribers  to  maintain  the 

equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other- 
email  users. 

iii.  Subscriber  and  billing  information.  Tire  Providers  coUect  and  maintain 
(typically  unverified)  identifying  information  about  each  subscriber,  including,  for  example,  name, 
username,  addi'ess,  telephone  number,  aird  alternate  email  addresses.  The  Providers  also  mamtam 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  (e.g.,  active  or  closed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  pa}dng 
subscriber's,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 

including  any  credit  card  or  bank  accoimt  number. 

iv.  Tronsactipnal  information.  The  Providers  also  typically  retain  cer-taur 

transactional  information  about  the  use  of  each  account  on  its  system.  This  information  can  mclude 
records  of  login  (/.  e.,  session)  times  and  durations  and  the  methods  used  to  connect  to  the  accormt 

(such  as  logging  into  the  accoimt  through  the  Providers’  website). 

V.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 

complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  fypically  maintain  records  of  any 

search  history  or  web  history  associated  with  the  subscriber  s  accoimt. 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  witlr  its  e-mail  accounts:  (A)  Google 
Docs  ”  wliich  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchaf  or  Instant 
Messenger,”  wliich  provides  a  chat  interface  through  which  users  can  communicate  with  each 
-other  in  real  time.  Oath  also  typically  maintains  content  and  records  relating  to  AOL  instant 
message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 

m  real  time. 

viii.  Preserved  and  backup  records.  The  Providers  also  maintain  presei-ved 
copies  of  the  foregoing  categories  of  records  witli  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preseiTation  request  fi-om  the  Government  pursuant  to  18  U.S.C.  §  2703(f).  The 
Providers  may  also  maintain  backup  copies  of  the  foregomg  categories  of  records  pursuant  to  its 

own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pur-suant  to  18  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 

a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 

of  Criminal  Procedure. 

6.  A  search  warrant  under  §  2703  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  tlie  offense  being 
investigated.”  18  U.S.C.  §  2711(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  the  subscriber  of  tire  existence  of  the  warrant.  18  U.S.C. 

§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precludrng 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  tire  warrant,  for  such  perrod  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notifrcation  wrll  serrously 
jeopardize  an  investigation.  18  U.S.C.  §  2705(b). 

~  E.  Prior  Applications 

8.  On  or  about  My  18, 2017,  in  connection  with  an  investigation  being  conducted  by  the 
Office  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (“FBP’)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  waii'ants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  aird  November  13,  2017,  and  emails  in  the  MDCPC  Account  sent  or  received  between  the 
opening  of  tlie  accoimt  and  November  .13,  2017.  The  SCO  has  since  refen-ed  certain  aspects  of 
their  investigation  into  Cohen  to  the  USAO,  which  is  worldng  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  tire  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  the  search  wan-ants  executed  by  the  SCO,  which  had  afready 
been  reviewed  for  privUege.  ‘  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


’  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
pursuant  to  Fed.  R.'  Grim.  P.  41,  to  review  the  emails  obtained  pursuantto  the  Prror  Coten  Accoun 
Warrants  for  wtdence  related  to  certain  additional  conduct  that  was  not  tire  focus  of  tire  Pr  o 
Cohen  Account  Wan  ants.  The  emails  obtained  from  the  Prror  Cohen  Account  Wanants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  the  instant  application. 


02.28.2018 


Case  l:18-cr-00602-WHP  Document  48-5  Filed  07/18/19  Page  13  of  73 


responsive  materials  produced  pursuant  to  the  July  18  andNovember  13, 2017  warrants  (the  “Prior 
Cohen  Account  Warrants”). 

9.  On  or  aboutNovember  7, 2017,  and  January^,  2018,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  firom  the  Cohen 
Account,  'fhc  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  USAO. 
This  affidavit,  as  discussed  below,  is  based  in  pait  on  my  review  of  the  pen  register  data  obtained 
pursuant  to  the  November  7, 2017  and  Januai7  4, 2018  orders  (the  “Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  Disbict  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  infoimation  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  pait  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Information”). 

n.  Probable  Cause 
A.  Overview 

1 1 .  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banlcs.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomei'ate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  , material  information  from  financial  statements  and  othei-  disclosures  that  Cohen 
provided  to  multiple  banks  in  coimection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  miUion  in  debt  he  owed  on  taxi  medallion  loans  fixim  tlie  banlcs.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receivmg  in  2017 
ftom  new  consulting  work;  (ii)  significantly  miderstated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 

agreed  to  make  a  $3.8  million  cash  payment  to  a  third  pai'tyj 

acquisition  of  the  taxi  medallions  seciumg  Cohen’s  debt.  By  making  these 
misrepresentations  and  material  omissions,  Cohen  avoided- making  montlily  payments  on  his 
loans,  and  attempted  to  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 


in  connection  with 


certain  repayment  obligations  worth  millions  of  dollars. 

13.  Based  on  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Warrants, 
MDCPC  Header-  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  CO 


communicate  with! 


and  their  attomeyj 


about  the  proposed  transfer  of  Cohen’s  medalUons  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  the  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 

Additionally,  |||||||m|^mmHm||||H^Hised 

Account^^^^^^^H^ccount  respectively,  to  communicate  with  Cohen 

about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 


the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 

("LLCs”)  conti-olled  by  him  and  his  wife,  Lam-a  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Bank  C'Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  indushy 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  teims  of  those  loans 
and/or  relieve  himself  from  their  obligations,  includhig  the  personal  guai'antees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Mehose  about  his  net  woilh,  assets, 
available  cash,  and  financial  outlook.  Specifically,  based  on  my  review  of  records  maintained  by 
Sterling  and  Mehnse,  and  public  somces  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepai'ed  by  law  enforcement  ofDcers  of  intei  views 
with  a  Sterling  executive  vice-president  (the  "Sterling  Employee-1”)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Eraployee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 

is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 

wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 

medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 

loans  from  Capital  One  Bank,  for  which  the  medallions  sei-ved  as  collateral.  Cohen  was  not  a  taxi 

operator,  and  leased  his  medallions  to  a  third  party.  That  thifd  party  made  monthly  payments  to 

,  *'  .  '• 

Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  payments. 

(  ,'•  *  sr 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling,  when  he  sought  to  refinance  a 

I 

mortgage  on  a  rental  property  that  he  owned.  In  or  amund  April  2014,  Cohen  raised  with  Sterling 


2  One  of  these  companies.  Mad  Dog  Cab  Coip.,  was  jointly  owned  by  Sondia  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  h-ansaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  m 
value  of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber  taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  terra  credits,  as  the  market  value 
of  taxi  medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — like  the  loans  held  - 
by  Cohen — ^were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  boiTowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes.  Cohen  appeal's  to  have  followed  this  approach  m 
2014,  when  he  agreed  to  refinance  his  medallion  lomis  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files— was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  railUon,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 

allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medaUion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment 
due  on  December  8, 2016.  Each  loan  was  signed  by  Michael  or  Lam'a  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  making  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  secui'ity,  Michael  and  Lama  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pui-sue  collection  against  the  Cohens’  personal  assets  were 
then.'  corpprations  to  default  under  the  loan  agreements.  In  total.  Sterling  agreed  to  lend 

10 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  ti-ansfereed  45  percent  of  that  debt  to  Mehose.^  Under  the  terms  of  Sterling’s  participation 
agi-eements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Melrose,  consistent  with  its  paiticipation  in  the  deal)  conducted  diie  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August- 1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.'*  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  ftom  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  raUUon, 
and  the  net  worth  of  Cohen — ^who  was  the  direct  obligor  under  the  guarantee  agreements  ^was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  records 
maintained  by  Sterling  and  an  interview  with  Sterling  EmpIoyee-2  that,  beginmng  in  or  around 

5  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorsliip  by  tire  National  Credit  Union  Admrmstration  ( 'NCUA  ). 

“*  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Coheu  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  maldng  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  witli  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen— which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  wliich  Cohen  told  Sterling 
Employee-2,  in  sum  and  substance,  about  his  cash  flow  problems  and  a-monthly  shortfall  of 
approximately  $16,000.  In  that  same  email.  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  financial  information  “indicatefd]  a  strong  ability  to  malce  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  banlc  for  a  reduction 
in  Cohen’s  montlily  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2, 1  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28, 2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  fi'om  my  review  of  records  maintained  by  Sterling  diat  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility— both  internally  and  with  Cohen— of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments,  Sterling  and  Melrose  agreed  to  amend  then  loans  with  Cohen  by. 
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among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8, 2017. 

g.  I  Icnow  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named|mm|||||  who  would  agree  to 
assume  Cohen’s  debt  with  Sterling  and  Mehose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2  referenced 
above,  I  Imow  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  to  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans— and  because  Sterhng  was  unfamiliar  witl^^l 
^^^^^|-Steriing  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1, 2017,  Cohen  told  Sterling  Employee-1,  iri  sum  and  substance,  that  he  would 
rnaice  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  witl^^^|^|  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 
Employee-2  on  or  about  Febmary  22, 2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  miUion 
fiom  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Mekose,  Sterling 

was  required  to  secure  Melrose’ s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
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Melrose  agree  to  the  terras.  On  or  about  May  2,  2017, | 


I  emailed  Sterling 


Employee- 1  from  the 
Sterlmg  Employee- 1  responded  to  I 


Melrose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending 


l^-Ccount  to  inquire  about  the  status  of  the  transaction. 


Account  that 
term  sheet 


shortly. 

i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  rcquested 
financial  information  fi’om  the  parties.  On  or  about  October  26. 20 16,  a  Sterling  employee  emaUed 
ccount  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 
proceed  with  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 

^m^^^^^^^^^^^^^^^responded  the^^^^^^^^^^kccomit, 

HHHmiHlllimat  would  send  a  financial  statement  and  tax 

returns  shortly.  AdditionaUy,  on  or  about  June  7,  2017,  Sterling  Employee-1  emailed  Cohen  to 
request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8, 20 1 7,  Cohen  emailed  Sterling 
Employee-1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  foim  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  "May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffiey  Getzel,  stating,  m  sum  and 
substance,  that  the  information  in  the  statement  came  from  Cohen  and  fiiat  Getzel  had  not 
confiimed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Fmancial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  leamed'that  Sterling  Employee-1  reviewed  each  line  of  the  May  2017  Financial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 


Employee-^1,  in  sum  and  substance,  that  the  May  2017  Financial  Statement  was  accurate. 

k.  On  or  about  August  16,  2017,  Sterling  Employee-1  emailed  Cohen  at  the  Cohen 


Account  and! 


at  thel 


ccoxmt,  attaching  a  non-binding  term 


sheet  memorializing  the  potential  transaction  between  Sterling,  Mehnse,  Cohen,  and 
On  or  about  August  29,  2017,  ^H^maUed  Sterling  Employee-1  from  the| 


Accoimt,  requesting  that  he  be  included  on  “all  future  e-mails  t(| 


and/or 


I  concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 


I  at  the 


August  30,  2017,  Stei-lmg  Employee-1  emailed 
Account,  Cohen  at  the  Cohen  Account,  an<^Hat  tlre^^Vccount,  and  provided  them  with  a 
revised  term  sheet.  On  or  about  September  5, 2017,  Sterling  Employee-1  sent  .| 
at  the|mm^H|  Account,  Cohen  at  the  Cohen  Accoimt,  an 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet, 

$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  thal| 


acquire  from  Cohen. 

1.  As  part  of  the  agreement,  according  to  the  term  sheet,  $1,265,913  mprincipal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 


02.28.2018 


15 


Case  l:18-cr-00602-WHP  Document  48-5  Filed  07/18/19  Page  22  of  73 


remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars  ^because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee-1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  hill  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  th<^^^^Hransaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Mekose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  tire  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Mekose  (as  well  as  Mekose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
requked  and  requested  additional  financial  statements  for  Cohen  and 
underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017, 
ftom  the  ^^^^^^^^Account  to  a  Sterling  employee  copy 
lersonal  financial  statement.  The  financial  statement  lists  the 
Account  as  tire  email  contact  fo;||||||||||||||||||^||||||^  Additionally,  on  or  about  October  5,  2017, 
Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Account,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  September  2017 
Financial  Statement”). 
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n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffi-ey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  fi'om  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  201 7- Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (.such  as  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 
time,  he  indicated  was  held  in  trust),  llie  September  2017  Financial  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions  and 
some' of  his  real  estate  investment  entities. 

0,  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  at  or  around  the  time  Cohen  provided 
Sterling  with  these  financial  statements— in  or  around  September  2017— Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  montlrly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 

^Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whid^^^^^siderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^^teim  sheet. 
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September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-^^^^Jtransaction  was  favorable  for  the  banlc 
-  that  is,  that^^^^^would  be  a  better  borrowei-  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29, 2017,  Sterling  sent  Cohen  a 
letter  stating  that  he  was  in  default  under  the  loans  between  Sterling  and  Cohen’s  medalEon 
corporations.  Cohen  did  not  make  to  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterlhig  Employee-1  on  or  about  January  24, 2018,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen^^^^li  transaction,  Cohen  would  “bring  all  payments  up  to  date  as 
well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  201 8,  that  at  the  closing  of  the  Cohen^^^^^^^^^transaction,  Sterling 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guai'antees  of  the  medallion  loans  had  been  terminated. 

q.  The  Cohen^^^^^Jransaction,  however,  did  not  close.  On  or  about  January 

29, 201  ^^^^^^^ottomey,  emailed  attorneys  for  Sterling  from  the^^^^|^ccount 

and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  nmnbers  have 
changed  and  we  are  not  prepaied  to  go  foiward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohei^^^^^^deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  (“Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterlhig  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  cuirent”  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterlmg  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and  $750,000  to  bring  the  principal  balance  to  $20,500,000.-  Cohen  also  suggested  revised  monthly 
interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approxunately  $1,750,000),  and  would  need  to  make  larger  monthly  interest 
payments. 

s.  On  or  about  Febinary  1 , 201 8,  Cohen  emailed  Sterling  Employee-3  fi-om  the  Cohen 
Accomit  and  proposed  “[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $  1,250m. 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resom-ces  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  inteiwiew  with  Sterling  Employee-2, 1  have  leanied  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  cmrent  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Mehose®)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medallion  loans,  make  monthly  interest  payments,  or  pay  past-due  amounts,  it  appears  that 
between  20 16  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(■Tirst  Republic”),  and  then  received  millions  of  dollars  in  purported  consulting  payments  in  these 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accountant— Cohen  withheld  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Republic  employees,  I  have  learned,  among  other  things,  tire  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checldng  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities. 


®  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melroses^a^ 
Mehose  could  make  a  detemrination  as  to  whether  to  approve  of  the  Cohei^^^^^^ 


transaction.  Based  on  my  review  of  reports  of  interviews  with  Mehose  employees,  I  also  know 
that  Cohen  called  employees  at  Melrose  regardiirgthe  Coher^^^^^^l  transaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  tire  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultonte  Account”).  Cohen  was  the  only  autliorized  signatory  on  the  account.  When  Cohen 

•  I 

opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-yom--customer 
questions’  about  the  purpose  of  the  account— the  answers  to  which  First  Republic  Employee-1 
entered 'into  a  form®— Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business— which  he  said  was  not  his  main  source  of  income— separate  fi'om 
his  personal  fmairces.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  tire  account  and  source  of  fimds  for  the  account  were 
false.  Specifically,  the  accoimt  was  not  intended  to  receive — and  does  not  appear  to  have 
received — ^money  in  cormection  with  real  estate  consulting  work;  in  addition,  the  accormt  has 

received  substantial  payments  fi-om  foreign  sources. 

c.  Fust,  on  or  about  October  27,  2016— the  day  after  he  opened  the  Essential 
Consultarrts  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 

V 

attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


’  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuairt  to  tire  Banlc 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

®  Fu-st  Republic  Employee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  EmpIoyee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  ratlier  was  a  “settlement”  payment  made  to  Davidson’s 
client.  ®  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affak  with  Donald  Trump.  On  or  about  February  13, 2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  tiansaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

”  d.  S  econd,  I  know  from  my  review  of  First  Republic  banlc  records  that  were  scheduled 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
firom  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  tire 
following: 

1.  Begimiing  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  fi-om  an  entity  called  Coliunbus  Nova  LLC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  LLC. 


®  Specifically,  I  have  learned  firom  my  review  of  bank  records  that  on  or  about  October  26, 
2016,  Cohen  tiansfeired  $131,000  firom  a  home  equity  line  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
fi-om  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Los  Angeles;  and  on  or  about  November  1, 2016,  a  wire  transfer  in  the  amount  of 
approximately  $96,645  was  made  fi-om  Davidson’s  account  to  a  banlc  accormt  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5, 2017,  Cohen  began  receiving  payments  from 
Novaitis  Investments,  SARI.,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  hitemational  AG  (“Novartis”).  BetweenApril  2017  and  Januar7 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated 'with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants  Account  and,  from  in  or  about  lime  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  nine  $50,000  payments  fr-om  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10, 2017,  June  9, 2017,  July  10, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four'  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  banlc  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAl”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  KazkommertsbanIc,  a  Kazakhstani  banlc.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  tire  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 
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vi.  Intotal,  from  on  or  about  January  31, 2017  to  on  or  about  January  10,2018, 
the  Essential  Consultants  Account  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10, 2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  tliis  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Accoxmt”). 
Cohen  was  the  only  authorized  ”signat6r3ron  the  account.  Among  other  things,  the  MDC&A 
Account  received  ten  wke  transfers  and  one  check  frnm  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Accoimt  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2, 2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accomits  to  Sterling  during  the  negotiations  with  respect  to  the 
^^^^^^^Htransaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Accoimt  Waitants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  wer  e  for  political  consulting  work,  including  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration.’®  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 
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a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  tlie  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  with  ICAI.  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1, 2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbur-sed 
through  eight  $150,000  installments  between  May  2017  and  December  2017. 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  fiom  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Banlc.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Banlc  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  February  13, 2017,  Cohen  emailed  an  AT&T  employee  &om  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  sei-vices  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants]’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  liis 
services  ...  a  consulting  fee  of  Fifly  Thousand  ($50,000)  Dollars  ...  per  month.”  Based  on  my 
review  of  reports  of  interviews  witli  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutiulity,  the  merger  between  AT&T  and  Time  W arner, 
and  tax  reform. 

d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  otlier  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year-.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  lear-ned  that  Novartis  retained  Cohen  to 
provide  political  consulting  sei-vices  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
Administration. 


e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  woiUd 
“jointly  represent  clients.” 

18.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  botli  accounts,  Cohen  did 
not  disclose  that  infoimation  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
by  my  f 

have  learned  the  following: 

a.  hr  or  about  May  2017,  Geteel  met  witli  Cohen  at  a  law  firm  in  Manliattan,  New 

I  '  ■  '  -'.I 

York.  At  the  meeting,  Cohen  told  Geteel,  in  'sum  and  substance,  that  he  had  set  up  a  law  practice 


,;:l' 


I  '  I 


called  Michael  D.  Cohen  &  Associates  P.C,  and.  a  consulting  company  called  Essential  Consultants 
LLC.  Cohen  told  Geteel,  in  sum  and  substance,  that  he  expected  to  ear-n  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Geteel  was  preparing  a  per-sonal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Geteel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[a]ttached  is  a  draft  of  the  new  PFS  as  of  September  30, 2017 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  di-aft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt,  hi  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 
that  the  financial  stateni'ent  did  not  list  any  assets  associated  with  either  the  Essential  Consultants 
Account  or  the  MDC&A  Account;  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D.  Cohen  &  Associates  POC  [j-ic]  and  Essential  Consultants  LLC.  Please  advise  whether 

or  not  these  should  be  disclosed  and  what  value.” 

c.  On  or  about  October  6, 2017,  Cohen  called  Getzel  by  telephone— which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[IJooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  finm  my  review  of  banlc  records  and  emails  sent  by  Cohen 
to  Sterhng,  I  lorow  that  the  September  2017  Financial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Accoimt  or  the  MDC&A  Account.  As  of 
September  30,  2017 — ^the  date  of  the  September  2017  Financial  Statement — Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Accoxint  and  $248,619.28  in  the  MDC&A 
Account.  As  of  October  6, 2017,  tire  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  tire  Essential  Consultants  Account  and  $248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
MDC&A  Account  from  Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated 
his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  Icnow  from  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned  the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30, 2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  tire  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  liis  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  thme  accounts  was  $1,270,600.41. 

c.  As  of  September  30, 20 1 7,  Cohen  had  $260,689. 1 8  in  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic. 


02.28.2018 


28 


Case  l:18-cr-00602-WHP  Document  48-5  Filed  07/18/19  Page  35  of  73 


e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 


September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
^ife — and  the  total  balance  across  the  two  accounts  as  of  September  30, 2017  was  $300,096.72. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $5,014,051.80  in  his  accounts 
-at  Capital  One  Bank,  Signature  Bank,  'fD  Bank,  Bethpage  Credit  Union,  First  Republic,  and 

Morgan  Stanley. 

21 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  from  Sterling  and  Melrose,  in  order  to 
secme  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  repoifs  of  inteiviews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Mehose 
would  view  Cohen’s  miderstating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  tire  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agi'eement  With 


22.  As  set  forth  in  detail  below,  it  appears  that  duiing  the  course  of  Cohen’s  negotiations  to 


sell  his  interest  in  taxi  medalhons  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 
negotiated  with  it  appears  that  agreed  to  pay  an  above-market  price  for 

Cohen’s  taxi  cab  medaUions,  and  in  exchange,  Cohen  agreed  to  pay  pproximately 
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$3.8  million  in  cash.  Specifically,  firom  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee-1 ,  as  well  as  ray  participation  in  an  intei-view  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  cnculated  by  Sterling 
Employee-1  to  Cohen  and^^^^^|  See  supra  ^  14(k).  According  to  the  term  sheei^^^ 

^^^^^Hivould  borrow  $20,000,000  ficom  Sterling  and  Mekose,  to  be  secured  by  the  medallions 
thal^^^^^^/as  to  acquire  from  Cohen.  At  aprice  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,9 13  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  to^^^^|  or  any  other  form  of  payment  or 
financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  terms  of  the  Cohen-^^^^^|transaction  and  the  new  loan 

not  mention  any  payments  from  Cohen  including  a  $3.8  million  payment.  The 

memorandum  also  noted  that  the  “loari  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  cmrent  market  values.”  Indeed, 
according  to  air  inteitial  Stei-ling  memorandum  dated  Febmary  5,  2018,  in  the  month  of  January 
201 8,  taxi  medallions  sold  for  amounts  ranging  fi'om  $120,000  to  $372,000.  According  to  Sterling 
Employee- 1  and  Sterling  Employee-2,  they  were  never  told  thaH^m  agreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to 
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23.  While  Cohen  and  not  disclose  any  payment  j&om  Cohen  to 

communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  &om  Cohen 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  "Getzel  Memorandum”).- 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and^^^^^^^ 
in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^^ 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 
payment  of  $3,800,000  imH||||||mit  Getzel  did  not  know  where  Cohen  was  going  to  obtain 
$3,800,000  to  pa^m^^^  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 
cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1 .25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  tliat  Sterling,  Melrose,  or  any  other  fmancial  institution 
involved  in  the  potential  deal  with  Cohen  and^^^^^^^^^^as  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen 


**  The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  ton  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  tlie  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  2015,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
In  the  com'se  of  domg  so,  Cohen  has  used  the  Cohen  Accoimt  and/ or  MDCPC 
Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 
undisclosed  -  side-payment  with  at  the Account, 

mHat  the|^^^^^H|Account,  at  thr^^^Ucount. 

as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  CoheK^^^^^^|ti'ansaction  with  Sterling; 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  prmcipal  amount  of  the  loan,  see  supra  ^  14(g),  to  send  term  sheets  to  Sterling,  see  supra  ^ 
14(i),  to  communicate  witli  his  accountant  about  the  contents  of  financial  statements,  see  supra  ^ 
16,  to  send  financial  statements  to  Sterling,  see  supra  ^  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  14(n),  to  negotiate  a  reduction  of  his  debt  with 

.  Sterling  on  or  around  January  31, 2018,  see  supra  ^  14(o),  to  tell  Sterlhrg  on  February  1, 2018,  he 
does  not  have  the  ability  to  pay  more  than  $1,250,000,  see  supra  14(p),  and  to  commumcate  with 
individuals  responsible  for  sources  of  payments  to  the  Essential  Consultants  Account,  see  supra  ^ 
15.  In  other  words,  from  the  communications  described  above,  it  appears  lilcely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  commimications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 

b.  the  Account  to  communicate 

the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 
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as 


s  October  2016.  See  supra  K  14(g).^^  Specifically,  as  described  above,  as  early  as  May  2, 2017, 
mm^l^lused  to  inquire  about  the  status  the  transaction, 

see  supra  ^  14(h).  He  usedlh^^^^^^H^ccountto  exchange  drafts  of  the  proposed  term 
sheet  with  Cohen^^^,  and  Sterling,  ^ee  supra  T)  HQ).  The^^^^^^^^ccount  was  also 
used  send  a  personal  fmancial  statement  foiHlllimto  Sterling, 

see  supra  ^  14(1).  The^^^^^^^^Account  was  copied  on  emails  &om 
Account  about  the  transaction,  see  supra~^  14(i),  and  was 'listed' on  |[mm  financial 
statement  as  the  contact  email  fot|m|||||||||[|  see  supra  ^  1 4(m).  Additionally,  based  on  my 
review  of  MDCPC  Header  Information,  I  Icnow  that  on  or  about  September  1, 2017— at  or  around 
the  tune  thi^^^^^fand  Cohen  were  negotiating  a  term  sheet— the 
Account  to  send  and  receive  eiglit  emails  fi'om  Cohen  at  the  MDCPC  Accoxmt. 
used  Account  to  communicate  with  Sterling  employees,  Cohen, 

aud^^^^^^^^sboutthe  proposed  taxi  medallion  transaction  since  at  least  December  2016. 
See  supra  14(^,  24(c).  Specifically,  on  or  about  August  29, 2017,^^told  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  H  140). 
Additionally, was  involved  in  malting  revisions  to  the  parties’  term  sheets,  and  he  told 
Sterling  on  January  29, 2018  that^^^^|  would  not  go  foiward  with  the  plaraied  transaction, 
see  supra  H  140),  W-  Accordingly,  there  is  probable  cause  to  believe  tiiat  the^^|^ccount  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  payment  from 
Cohen  to||^^|^^|  and  the  reasons  for  the  collapse  of  the  Cohei^^^^^Htransaction. 


'^PoHnstance^^M^records  provided  by  Sterling,  I  know  that  on 

email  to  a  Sterling  emplove^sing  the 

Account.  The  email  forwarded  correspondence  betweeiB^^Bv^^^yg^^^ 

Account,  and  an  employee  of  Capital  One  regai-ding  extending  with 

Capital  One. 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
was  previously  receiving  at  the  Cohen  Account.  SpeciQcally,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5, 2017,  Cohen  sent  an  email  from  the 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 
coriitect  and  communications.”  "The  signature  line  on  the  email  listed  “Essential  Consultants  LLC’ 
and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address. 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 
pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  the  Cohen  Account,  to 
communicate  with  th{^^|\ccount,  and  to  send  and  receive  emails  from  other  email  accounts 
about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Infonnation,  it  appears  that  since  the  November  13, 2017  search  wan-ant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pm'suant  to  the 
Prior  Cohen  Account  Wanants,  as  weU  as  the  MDCPC  Header  Information  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
communicating  about  term  sheet  for  the  Cohe^^^^^^^Htaxi 


Based  on  my  review  of  emails  fi'om  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  die  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infi’a  ^  27. 
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medalUon  transaction,  supra  H  U(k\  Cohen  used  the  MDCPC  Account  to  send  or  receive 
emails  the^^jAccount.  For  instance,  on  or  about  August  22,  2017;^^|ased 


t{-^^^^|\,ccount  to  send  an  email  to  Sterling  Employee-1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day,  Sterling  Employee-1  responded  tQ^^|at  tht^^J  A.ccount 
and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22, 2017,  Cohen  also  used  the  MDCPC 


Account  to  send  an  email  to  Sterling  Employee-1. 


b.  As  noted  above,  on  or  about  September  1, 2017,  Cohen  used  the  MDCPC  Accoimt 


to  send  or  receive  eight  emails  with  the 


Account. 


'  c.  Cohen  used  tire  MDCPC  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  political  consulting  agi'eement.  For 
example,  beguming  m  April  2017— the  same  month  when  Cohen  began  receiving  payments  from 


AT&T,  see  supra  16(d),  17(c)— Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  fi-om  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  hr  April  2017— which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  16(d),  17(d) 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novaiiis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 

assistance  on  an  initiative  relating  to  di'Ug  pricing. 

d.  From  my  review  of  the  MDCPC  Header  Information,  I  have  learned  that  Cohenhas 

conthrued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appear-s  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
Al'&T.  For  instance,  on  approximately  six  occasions  between  November  28, 2017  and  January 
30, 2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  I,  2017  and  Februai-y  20,  2018,  the  MDCPC  Account  was  used  to  send  and 
receive  emails  fiom  accounts  belonging  to  individuals  using  @novartis.com  email  addi'esses. 
Since  November  15, 2017,  the  MDCPC  Accounthas  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.lcz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Bank,  see  supra  16(d),  17(b),  and  @squuepb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  law  firm  Squire  Patton  Boggs—^both  of  which  Cohen  appears  to  have  a 
consulting  relationship  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  worlc. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra  TI 


9,  it  appeal's  that  since  the  date  of  the  last  search  wairant  on  the  Cohen  Account  (i.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the 
H^^^^^H^count,  the  ^^J^ccount,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  tlie  Pen  Register  Data 
has  revealed  the  following: 

Hmeount  on  or  about  December  18, 


a.  Emails  sent  by  the  Cohen  Account  to  thr^ 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  January  3, 

2018  at  8:01  a.m.,  Januai-y  3, 2018  at  2:56  p.m.,  and  January  4, 2018  at  3:31  p.m. 


b.  An  email  sent  by  the  Cohen  Account  to  the  | 
January  25, 2018  at  8:55  p.m. 


Itccount  on  or  about 
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Ion  or 


c.  Emails  fi’om  the  Cohen  Account  to  the  email  accoun| 

about  December  1,  2017  at  2:14  p.m.,  December  29, 2017  at  10:20  p.m.,  January  2,  2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 
emails  contained  in  the  Cohen  Account,  I  have  learned  that  email  account 

belongs  to  Jefh'ey  Getzel,  Cohen’s  accountant,  thi'ough  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

d.  Ktnnils  from  the  Cohen  Account  to  email  accounts  belonging  to  Sterling  employees. 


including  Sterling  Bmployee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at 5:30  p.m.,  January  29, 2018  at  8:29  p.m.,  January  30, 2018  at  6:44 


p.m. 

e.  An  email  sent  fi:om  the  Cohen  Accormt  to  the  email  accoimt 
clientserviceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 

f.  ISfiunerous  emails  sent  fi:om  the  Cohen  Account  to  the  email  account 
including  emails  on  or  about  December  4, 2017.  at  2: 17  pm.  and  January  29, 

2018  at  5:43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  dociunents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 


email  address  belongs  to 


29.  Based  on  my  review  of  records  maintained  by  Sterling,  1  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen- 
Based  onmy  ti'aniing  and  experience,  I  Icnow  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  shai’ing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 


transaction. 
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also  know,  fix)ra  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 
contmn  evidence  related  to  the  Subject  Offenses. 

30.  Thus,  I  respectfiiUy  submit  that  tliere  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 

through  the 

MDCPC  Account,  I  know,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfiiUy  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  the  ^^^^^^^^l^ccount,  j^^^^^^^^^^ccount  and  ^^|\ccoimt 
about  October  1,  2016— the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
above— such  — of  misstatements 

omissions  to  financial  institutions. 
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Tp.mpnrni  T.imitatinn.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attachments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seelcs  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  fi.-om  the  Cohen  Account  that  were  sent,  created,  or  received  before  November  14,  2017. 
This  application  also  seeks  other  information  specified  above  associated  with  the  Cohen  Account 
that  was  created  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 20 1 7,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  firom  the  MDCPC 
Account  that  were  sent,  created,  or  received  before  November  14, 2017. 

For  the^^l^H^l^lll^ccoiuit  and  .|^|^^^^^^|^.cco^mt,  this 
seelcs  emails  and  all  other  content  infoimation  specified  above  sent,  created,  or  received  between 
October  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  October 
2016  is  the  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale  with 

d.  For  the  ^^^Vccount,  this  application  seeks  emails  and  all  other  content 
information  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  2016  is  the  month  in  which^^H 
began  representing  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Insti-umentalities 

32.  Based  upon  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Cohen  Account  will  contain  evidence, 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  Et  of  Attachment  A  to  the  proposed  wamant  for  the  Coheai  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 
MWor  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  oir  liabilities,  to  others,  including  tc^^^^^^^^^^^|tnd/or  entities 
associated  wifri  him; 

j  'd,  •  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  IXC  or  Michael  D.  Cohen  &  Associates,  includmg  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  fi:om  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  |m||||||||||||tnd/or  entities  associated  vAtli  him; 

f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  Jeffiey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  h-ansactions  involving  that  financial  Institution; 

h.  Evidence  indicating  how  and  vdien  the  Cohen  Account  and  MDCPC  Account  was 
accessed  or  used,  to  determine  the  geographic  and  chronological  context  of  account  access,  use,' 
and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  it 


relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 

information  stored  on  Google’s  servers  associated  with  the 

ccount  wUl  contain  evidence,  fiuits,  and  instrumentalities  of  violations  of  the  Subject 


Accoimt  and  I 


Offenses,  including  the  following: 

a,  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  used  tl^^^^^^^^^  Account  and  j^HHj^l 
Accormt; 


b.  Commimications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  liim  to  transfer  any  interest  in  taxr 
medallions,  and  any  associated  debts  or  liabilities,  h^^^^^^^^^^and/or  entities  associated 
with  him; 


c.  Commrmications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  tire  person(s)  —  who 
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corniQuni Gated  with  and  Account  about  any 

matters  relating  to  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
^^^^^^^md/or  entities  associated  with  him; 

Communications  th^^^^^^^^^^^Account  and 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Mehose,  or  other  jSnancial 
institution(s),  r^ardingCoEeh’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  uito  an  account;  or  the  pmpose  or  natui'e  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the^^^^^^^^^^Accouirt  and^^| 
^^^^^^l^ccoimt  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 
of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  Account  and  /mH||||m  Accoimt 

owners’  intent  as  it  relates  to  the  Subject  Offenses  under  hwestigation. 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
infonnation  stored  on  Oath’s  servers  associated  with  thc^^^^|v.ccount  will  contain  evidence, 
fruits,  and  insfrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the^^^|  ,ccount; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  ti^^^^^^^^^^|and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  ^^BA.ccmmt“about  any  matters  relating  to  any  plan  or  proposal  of 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  tm|m||||^|nd/or  entities  associated  with  him; 

d.  Communications  between  1^^^^\.ccount  and  others,  including  employees  or 
representatives  of  Sterling,  Mehose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

m.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  dhected  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (mcluding,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  tire 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  tire  government,  attorney  support 
staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  fof  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,'and  instrumentalities  of  tlie  Subject  Offenses,  including  but  not  limited  to 
undertalcing  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  umque 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  lilcely  to  search  for. 

37.  Because  Cohen  anc^^^^ire  attorneys,  the  review  of  the  content  within  the  Subject 
Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  marmer  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

rV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Cohen  that  he  is  under  hivestigation,  causing  him  to  destroy  evidence,  flee  from  prosecution,  or 
otherwise  seriously  jeopardize  the  investigation.  M  particular,  based  on  my  experience 
investigaturg  white  collar  cases,  including  cases  featming  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
corrceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  fitrancial  means  that 
would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordmgly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  1 8  U.S  .C.  §  2705(b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  sirailai-  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  permitted  without  fui-ther  order  of  this  Court  to  provide  cojjies  of  tlie  warr  ant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 

- §  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 

relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41 . 


United  States  Attorney’s  OfiBce 
Southern  District  of  New  York 


Sworn  to  before  me  this 
28th  day  of  Febmary,  2018 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l^graail.com,  . 


_ Maintained  at 

Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  20I8R00127 


Search  Warj^t  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
Bureau  of  Inve.stigation  (collectively,  the  “Investigative  Agencies”) 

the  United  States 


1.  Warrant,  Upon  an  affidavit  of  Special  Agent 
Attorney’s  Office  for  die  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 


cause  to  believe  the  email  accountil 


|l@gmail.com, 


;gmail.com,  and 


I,  maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attaclnnents  A  and  B  hereto.  Accordingly, 
die  Provider  is  hereby  dfrected  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  n  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  IB  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Waixant  and  Order 
on  the  Provider  widiin  7  days  of  the  date  of  issuance.  The  Wan'ant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  jSnds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  wiU  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 


for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  wliich 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 


Court  ser've  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


ate  Issued 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitlieatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
.il.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  tlie  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  n  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  v/ithin  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  dnected 

to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  fi'om,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  mcluding  all  message  content,  attachments,  and  header 
infoimation  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  tune  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  of  this  wannnt, 
inclusive. 

b.  Address  book  infonnation.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  regisbation  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  tiansactional  records  associated  witli  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  coirespondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries;  or  other  contacts  with  support  seiwices 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 

‘  warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  histant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1, 2014  and  tire  date  of  this  warrant,  inclusive. 

h.  Preserved  or  hachp  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pm-suant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

ni.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  m  this  investigation,  and  outside  teclinical  expeits  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fiaiits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  de&aud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessai'y  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accormt; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agr  eement  for  Michael  D.  Cohen  and/or  entities  associated  with  hun  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including^^^^^^^^^^^|nd/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D,  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or, agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffi-ey  Getzel  relating  to  Michael 
D,  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  pmpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
tlie  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was 'accessed  or  used,  to 
deteimine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  accoimt  owner"  and  ' 

- ir  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 

Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attoiTiey-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts  ^^f^gmail.com  ai|||||||||||||||^^  (the  “Subject  Accounts”)  for  the  time 

period  between  October  1, 2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  vdll  serve  this  wairant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  tlie  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  m  di-aft  form  in,  or  otherwise 
associated  with  tlic  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
infoimation  (specifically  including  the  somce  and  destination  addresses  associated  with  each 
email,  tire  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  siimlar  infoimation 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  addiess,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d .  Transactional  records.  All  transactional  records  associated  with  the  Subj  ect  Accoimts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  ‘and  mstant 
messages  or  Gchats  associated  with  the  Subj  ect  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  presei-vation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

in.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  tlie  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  Investigation,  and  outside  technical,  experts  under  government  conh'ol)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instnimentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defi-aud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fi-aud),  and  1344  (bank  fi-aud),  including  the  following: 

a.  Communications,  records,  documents,  and  otlier  files  necessary  to  establish  the  identity 
of  tlie  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ^|^^^|^Hmd/or  entities  associated 
with  himj 

c.  Commimications,  records,  documents,  and  other  files  necessaiy  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^mHH^Umd/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  sour  ce  of  funds  flowing  into  an  account;  or  the  pmpose  or  nahne  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  tire  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  piu'suant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  sepai-ate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Infoimation 
Associated  with  the  Email  Accoimts 
l@gmail.com, 

l@gmail.com,  and 

|i.  Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  20I8R00127 


18  MAG 


2877 


- Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  |||||||^^^m^|3f  the  United  States 
Attorney’s  Office  for  the  Southern  District  of  New  York,  and  puisuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Coiut  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^H|||||^m@gmail.com,  ^^^|@gmaiI.com,  and 

,  maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Waixant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  persomiel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  sei-ve  a  copy  of  this  Wanant  and  Order 
on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Waixant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  wairant  will  result  in  in  destruction  of  or 
tampering  witli  evidence  or  flight  fium  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  tire  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessar  y,  except  that  Provider  may  disclose  this  Wan'ant  and  Order  to  an  attorney  for  Provider 
for  the  pmpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  arrd  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  mrder  seal,  except  tlrat  the  Goverrrment  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Wan'ant  and 
Order  as  need  be  to  persormel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosm'e 
obligations  in  any  prosecutions  related  to  tliis  matter. 

Dated;New  York,  New  York 

Date  Issued  Time  Issued 

y  _ 

HONORABLlttHENRY  B.  PITMAN 
UNITED  STATES  MAGISTRATE  JUDGE 
Southern  Disfrict  of  New  York 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  wanant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  CaliforTiia  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
)gmail.com  (the  “Subject  Accoimt”)  for  the  time  period  referenced  below. 

A  law  enforcement  offtcer  will  serve  this  wari'ant  by  transmitting  it  via  email  or  another 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electr'onic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  eirforcement  personnel  will  review  the  information  for  items  falling  within  tlie 
categories  specified  in  Section  III  below. 

II,  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  fi-om,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14,  2017  and  Februaiy  28,  2018, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similai'  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  infoimation 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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niunber,  alleniate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  sei-vice,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
includmg  any  IP  logs  or  otlier  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  February  28, 2018,  inclusive. 

e.  Customer  correspondence.  All  conespondence  with  the  subscriber  or  others  associated 
witli  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  Febnrar'y  28,  2018,  inclusive. 

f.  Search  History.  All  sear'ch  history  and/or  web  history  associated  with  the  Subject 
Accormt,  limited  to  items  sent,  received,  or  created  between  December  1,  2014  and  Febnrary  28, 
2018,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1,  2014  and  February  28,  2018,  inclitsive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agerrts,  attorneys  for  the  government,  attorney  support  staff,  agency  persormel  assisting  the 
govermnent  in  this  investigation,  and  outside  technical  experts  under  government  contr'ol)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fi'uits. 
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and  instrumentalities  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^^^^|and/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessaiy  to  establish  the  identity 

of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  and/or  entities  associated  with  him; 

f.  Commmiications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Comniunications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  puipose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  soiu'ce  of  funds  flowing  into  an  account;  or  the  puipose  or  natoe  of  any  financial  tiansactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to  established 
procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney- 
client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include  use  of  a 
designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  addi'ess 
potential  privileges. 
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Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  wan-ant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other- 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts^^|@gmail.com  and  (the  “Subject  Accounts”)  for  tire  time 

per-iod  between  October  1,  2016  and  February  28,  2018,  inclusive. 

A  law  enforcement  officer  will  serve  this  wanant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

FI.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  tire  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts; 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  tire  sour-ce  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 
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c.  Subscriber  and  payment  information.  All  subscriber  and  payment  infoirnation 
regaiding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addi'esses,  registiation  IP  address,  accoimt  creation  date,  account  status, 
length  of  service,  types  of  sei-vices  utilized,  means  and  source  of  payment,  and  payment  histoiy. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accomits, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  conespondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  histoiy  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  presei'vation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  persomiel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  ai-e 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fiaiits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§  37 1  (conspiracy  to  commit  offense  or  to  defraud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  mstitution),  1 343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  tire  person(s)  who  created  or  used  the  Subject  Accounts; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  loim  to  h'ansfer  any  interest  in  taxi 


medallions,  and  any  associated  debts  or  liabilities,  to| 
with  him; 


and/or  entities  associated 


c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^m|mmand/or  entities  associated 
with  him; 


d.  Comnumications  between  tlie  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  puipose  of  an  accoimt  or  loan  at  that  financial 
institution;  the  natui'e  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 
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f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  tire  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedui'es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev,  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case 

Three  Electronic  Devices,  See  Attachment  A  ^ 

) 

SEARCH  AND  SEIZURE  WARRANT 

YoY~~Ai]y5authnrized:law^fbrcementT)f^  — - ' — 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
ofthe  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Three  Electronic  Devices,  See  Attachment  A 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search,  and  seize  the  person  or 
property.  .  ,  / 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  i S-  ,■  .  -  ; '  1  ^  A 

>  ,  (not  to  exceed  14  days) 

□  in  the  daytime  6:00  a.m.  to  10  p.m.  sT  at  any  time  in  the  day  or  night  as  I  ’find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  aitd  a'rebeipt  fot  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  .Cfefk  of  the  ,  Court.  ^ 

y/  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  bj'^  the  Clbrk  of  the  Couif: 

'  •  \  ;  '  '  USMJ Initials 


Sf  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18,U.S.C.  §  2,705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  ftld  person  who,  or  whose  propeidy,  will  be 
SGSTched  OT  seized  (check  the  appropriate  box)  Sffor  30  days  (not  to  exceed'SO).  '  ' 

□until,  the  facts  justifying,  the  later  specific  date  of  '  _  _ _ 


Date  and  time  issued:  A  7""/ T 


y 


Judge ’s  signdtute 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  2  of  80 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 

Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  ■ 
to  the  Court. 


Date;  _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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Attachment  A 

I.  Devices  to  be  Searched 

The  devices  to  be  searched  (the  “Subject  Devices”)  are  described  as: 

a.  Subject  Device-1 :  A  black  and  red  USB  drive  with  a  white  label  that  says  “Tracking 

#:  180208140208.” 

b.  Subject  Device-2:  A  silver  DVD  with  a  white  label  that  reads  “Cohen  - 

2018.03.07.” 

c.  Subject  Device-3:  A  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  -  Google 

audl&l.”  -  -  ^ 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Devices  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”),  as  listed  below: 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 
documents,  and  any  communications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen 
McDougal,  or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker,  and/or 
Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford, 
and/or  Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 


consultation  with  the  Trump  Campaign. 
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e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape. 

f.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject  Offense, 
including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 

for  the 


Southern  District  of  1 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Three  Electronic  Devices,  See  Attachment  A 


IHMAG  2958 


Case  No. 


APPLICATION  FOR  A  SEARCH  WARRANT 

I,  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 
property  to  be  searched  and.eive  its  loppitior^ 


located  in  the 


hrBH^lrnaTl‘'SeartdrWHrrarrts'rSee-Attach  ment- A- 

OcvCcr^  ^ 

Southern  District  of  New  York 


,  there  is  now  concealed  (identify  the 


person  or  describe  the  property  to  be  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 


The  basis  for  the  search  under  Fed.  R.  Grim.  P.  41(c)  is  (check  one  or  more)'. 
ivf  evidence  of  a  crime; 

□  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

□  property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 


Code  Section 

52  DSC  301 1 6(a)(1  )(A),  30109  Illegal  campaign  contributions 
(d)(1)(A)(1) 


Offense  Description 


The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

sf  Continued  on  the  attached  sheet. 

sf  Delayed  notice  of  30  days  (give  exact  ending  date  if  more  than  30  days: 
under  18  U.S.C.  §  3103a,  the  basis  of  whichissetfortiio|Dheattachedsheet 


)  is  requested 


Pkihted  name  ,anct  tide 


Sworn  to  before  me  and  signed  in  my  presence. 
Date :  .A  A  Of  f 


.City  and  state: 


4 


•'  ■ '  ‘ 


'  Judge’s  signature 

Hon.  Henry:  B.  Pltrnan,  U.S.  Magistrate  Judge 

Printed  name  and  title 
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TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  a  Search  Warrant 


Special  Agent  of  the  United  States  Attorney’s  Office  for  the  Southern 

Di^ct  of  Ne^ Ydr]cX“USAD’  ’)7heih^uryswom7hep^  and  says: 

I.  Introduction 
A.  Affiant 

1.  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  1  previously  served 
as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector  General  from  May  2011 
to  August  2016.  In  the  course  of  my  experience  and  training  in  these  positions,  I  have  participated 
in  criminal  investigations  into  federal  offenses  involving  a  wide  array  of  financial  crimes, 
including  frauds  on  financial  institutions,  and  have  been  involved  in  investigations  involving 
violations  of  campaign  finances  laws  and  regulations.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts  and  electronic 
devices. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  electronic  devices  specified  below  (the 
“Subject  Devices”)  for  the  items  and  information  described  in  Attachment  A.  This  affidavit  is 
based  upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my 
conversations  with  other  law  enforcement  personnel;  and  my  training,  experience  and  advice 
received  concerning  the  use  of  computers  in  criminal  activity  and  the  forensic  analysis  of 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  Of  America  for  a  Search  Warrant  for  Three 
Electronic  Devices,  USAO  Reference  No 
2018R00127 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 
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electronically  stored  information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited 
purpose  of  establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during 
the  course  of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  Prior  Warrants  and  the  Snbject  Devices 

3.  The  USAO  and  the  Federal  Bureau  of  Investigation  (“FBI”)  have  been 
investigating,  among  other  things,  a  scheme  by  Michael  Cohen  to  defraud  multiple  banks.  Cohen 
is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald  Trump, 
and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization,  an 
international  conglomerate  with  real  estate  and  other  holdings. 

4.  hr  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Colmnbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 


On  or  about  July  1 8, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


a. 


fegmail.com  (the  “Cohen  Gmail  Accounf ’)  sent  or  received 


emails  in  the  account 


between  January  1,  2016  and  July  18,  2017.  This  warrant,  which  is  nmnbered  17-mj-00503,  is 
attached  as  Exhibit  A  (the  “First  Cohen  Gmail  Warrant”). 


b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 


@gmail.com  (the 


for  content  stored  in  the  iCloud  account  associated  with  Apple  ID 


“Cohen  iCloud  Account”).  This  warrant,  which  is  numbered,  17-mj-00570,  is  attached  as  Exhibit 
D  (the  “Cohen  iCloud  Warrant”). 
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c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
November  13,  2017.  This  warrant,  which  is  numbered  17-mj-00855,  is  attached  as  Exhibit  B  (the 
“Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  account^^^^j^^^^^^^^the  “Cohen  MDCPC  Account”)  sent  or 
received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017.  This 
warrant,  which  is  numbered  17-mj-00854,  is  attached  as  Exhibit  C  (the  “First  Cohen  MDCPC 
Warrant”). 

5.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  worldng  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 
with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
worldng  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 
for  privilege. 

6.  On  or  about  February  28,  20 1 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other  accounts,  sent  or 

^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,  2018. 
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received  between  November  14,  2017  and  February  28,  2018.  These  warrants,  which  are  both 
numbered  1 8  Mag.  1 696,  are  attached  as  Exhibits  E  (the  “Third  Cohen  Gmail  Warrant”)  and  F  (the 
“Second  Cohen  MDCPC  Warrant”),  respectively.  The  content  produced  pursuant  to  these 
warrants  is  being  reviewed  for  privilege  by  an  SDNY  fdter  team. 

7.  The  search  warrants  described  above  are  referred  to  collectively  herein  as  the  “Prior 
Warrants.” 

8.  The  returns  of  the  Prior  Warrants  are  presently  contained  on  three  electronic 
devices.  In  particular: 

a.  Subject  Device-1:  The  non-privileged  emails  and  content  returned  in 
response  to  the  First  Cohen  Gmail  Warrant,  the  Second  Cohen  Gmail  Warrant,  and  the  First  Cohen 
MDCPC  Warrant  are  contained  on  Subject  Device- 1,  which  is  particularly  described  as  a  black 
and  red  USB  drive  with  a  white  label  that  says  “Tracking  #:  180208140208.” 

b.  Subject  Device-2:  The  non-privileged  content  returned  in  response  to  the 
Cohen  iCloud  Warrant  is  contained  on  Subject  Device-2,  which  is  particularly  described  as  one 
silver  DVD  with  a  white  label  that  reads  “Cohen  —  201 8.03.07.” 

c.  Subject  Device-3:  The  content  returned  in  response  to  the  Third  Cohen 
Gmail  Warrant  and  the  Second  Cohen  MDCPC  Warrant  is  contained  on  Subject  Device-3,  which 
is  particularly  described  as  one  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google  and 
l&l.” 

9.  The  Subject  Devices  are  presently  located  in  the  Southern  District  of  New  York. 

C.  The  Subject  Offenses 

10.  The  affidavits  in  support  of  the  Prior  Warrants  describe  evidence  of  several 
different  courses  of  conduct  by  Cohen,  including,  among  other  things,  false  statements  to  financial 
institutions  relating  to  the  purpose  of  an  account  he  opened  in  the  name  of  Essential  Consultants 
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LLC  and  the  nature  of  funds  flowing  into  that  account;  false  statements  and  fraudulent  omissions 
hy  Cohen  in  connection  with  this  attempt  to  refinance  his  debts  with  certain  financial  institutions; 
and  activities  undertaken  hy  Cohen  on  hehalf  of  certain  foreign  persons  or  foreign  entities  without 
having  registered  as  a  foreign  agent.  The  Prior  Warrants  accordingly  define  the  evidence  to  he 
seized  hy  reference  to  subject  offenses  and  specific  categories  of  information  related  to  these 


cours.es  of  conduct.  The  subject  offenses  in  the  Prior  Warrants  are  summarized  as  follows: 


Exhibit 

Warrant 

3 

Subiect  Offenses  in  Prior  Warrant 

A 

First  Cohen  Gmail 

18  U.S.C.  §§  371  (conspiracy  to  defraud  the  United  States),  1005  (false 

Warrant 

bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (banlc  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§  611  etseq.  (Foreign  Agents 
Registration  Act  (“FARA”)) 

B 

Second  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  371  (conspiracy  to  defraud  the  United  States),  1005  (false 
bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

C 

Cohen  MDCPC  Warrant 

18  U.S.C.  §§  371  (conspiracy  to  defraud  the  United  States),  1005  (false 
bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  larmdering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

D 

Cohen  iCloud  Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1344  (bank 
fraud),  1956  (money  larmdering),  951  (acting  as  an  unregistered  foreign 
agent),  and 22 U.S.C.  §§  611  etseq.  (FARA) 

E 

Third  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  financial 
institution),  1343  (wire  fraud),  1344  (banlc  fraud) 

F 

Second  Cohen  MDCPC 
Warrant 

18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  financial 
institution),  1343  (wire  fraud),  1344  (bank  fraud) 

1 1 .  Based  on  my  participation  in  this  investigation,  including  my  review  of  documents 
obtained  pursuant  to  subpoena  and  court  order,  my  conversations  with  witnesses  and  review  of 
reports  of  conversations  with  witnesses,  and  my  review  of  publicly  available  information,  I  have 


^  On  or  about  February  28,  2018,  the  USAO  sought  and  obtained  a  Rule  41  warrant,  authorizing  it 
to  expand  its  search  of  the  email  returns  for  the  warrants  attached  as  Exhibits  A-C  (the  First  Cohen 
Gmail  Warrant,  Second  Cohen  Gmail  Warrant,  and  First  Cohen  MDCPC  Warrant)  for  additional 
offenses  not  authorized  in  the  original  warrants  for  those  accounts.  The  below  chart  therefore  lists 
both  the  subject  offenses  listed  in  the  original  warrants  for  these  accounts  and  the  subject  offenses 
authorized  in  the  February  28,  2018  warrant. 
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learned  of  evidence  of  an  additional  Subject  Offense  committed  by  Cohen,  described  below,  which 
was  not  listed  in  the  Prior  Warrants.'^ 

12.  lam  therefore  requesting  authority  to  expand  the  search  of  the  returns  of  the  Prior 
Warrants,  as  contained  on  the  Subject  Devices,  for  evidence  related  to  the  additional  Subject 
Offense.  As  set  forth  below,  in  addition  to  the  categories  of  evidence  already  described  in  the 
Prior  Warrants,  there  is  probable  cause  to  believe  that  the  Subject  Devices  contain  evidence  of 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”).^ 

11.  Probable  Cause  Regarding  the  Subject  Offense 

13.  As  set  forth  above,  the  US  AO  and  the  FBI  have  been  investigating,  among  other 
things,  a  scheme  by  Michael  Cohen  to  defraud  multiple  banks.  During  the  course  of  this 
investigation,  the  US  AO  and  FBI  have  obtained  evidence  that  Cohen  has  also  committed  a  criminal 
violation  of  the  campaign  finance  laws  by  making  an  excessive  in-kind  contribution  to  the 
presidential  election  campaign  of  then-candidate  Donald  Trump  in  the  form  of  a  $  1 30,000  payment 
to  Stephanie  Clifford,  an  individual  who  was  rumored  to  have  had  an  extramarital  affair  with 
Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair.  As  set  forth  below,  there 
is  probable  cause  to  believe  that  this  payment  was  intended  to  keep  Clifford  from  making  public 
statements  about  the  rumored  affair  on  the  eve  of  the  2016  presidential  election,  and  thus 
constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 


As  set  forth  below,  I  base  this  application  in  part  on  my  review  of  emails  and  text  messages 
obtained  pursuant  to  the  Prior  Warrants.  Each  of  the  cited  emails  or  texts  messages  is  either 
responsive  to  the  applicable  Prior  Warrant  and/or  was  discovered  in  plain  view  dming  a  review  of 
the  emails  or  texts  returned  pursuant  to  the  applicable  Prior  Warrant. 

^  The  Prior  Warrants  describe  categories  of  information  that  likely  encompass  evidence  of  the 
additional  Subject  Offense.  Nevertheless,  in  an  abundance  of  caution,  I  am  seeking  explicit 
authorization  to  search  the  Subject  Devices  for  evidence  of  the  Subject  Offense. 
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14.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.  com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1 ,  201 1 ,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit  .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

15.  On  or  about  Jime  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 
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16.  On  or  about  October  7,  2016,  The  Washington  Po.?/ published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representahves  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

17.  Based  on  my  review  of  public  sources,  ineluding  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about  October 
2016,  Clifford  was  in  diseussions  with  ABC’s  Good  Morning  America  show  and  Slate  magazine, 
among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her  alleged 
relationship  with  Trump.  Aeeording  to  the  article  in  Slate,  which  the  author  based  on' 
eonversations  'with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  aeeusation.  As  ,  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  Oetober  2016,  I  was  eontacted  by 
counsel  for  Ms.  Clifford  stahng  that  news  outlets,  including  APC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

18.  From  my  review  of  telephone  toll  records^  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 

^  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contaet  file)  obtained  from  Cohen’s  telephone 
pursuant  to  the  iCloud  Warrant. 
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Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer^  Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content  of  the  text  messages  and  emails,  I  beheve  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 


’  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7: 56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3 :3 1  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Tbank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 
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f.  The  following  day,  on  October  1 0, 20 1 6,.  at  1 0 : 5  8  a.m. ,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump. ^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 

^  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10,  2016. 

19.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  1 3, 201 6,  at  8 :54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  coimnunicate  with  each  other  over  Signal,  which  is  an  encrypted 
conmmnications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  EEC”  on  September  30,  2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
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substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day,  another 
employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete.  Cohen 
returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy  of  his 
driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he  wanted  to 
fund  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7,  20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  loiow  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  1 7, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreemenf  ’  by  the  end  of  the  day 
if  Cohen  did  not  complete  the  transaction.  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  Government  has  not 
requested  documents  firom  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the 
email  referenced  in  this  article. 
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b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  commrmications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 
investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  hut  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 
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21.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  myreview  ofpublic  sources,  Ihave  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7: 1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — ^less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  EEC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  street  to  open  the  account,  so  First  Republic  Employee-2  called,  a 
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preferred  banlcer  at  that  branch  (“First  Republic  Employee- 1”),  to  assist  Cohen.  At  11:00  a.m., 
First  Republic  Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
Republic  Employee- 1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’ s  office  in  Trump  T  o  wer — 
on  the  same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Accounf ’)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4: 15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2 ’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
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and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker ^again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asldng  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  accoimt.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  imtil  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  aroimd  1  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — ^with  the 
funds  intended  for  Clifford — for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 
Email  Warrants,  1  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  Idndly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  accoimt 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 
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b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  frmded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  EEC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 

23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28,  20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
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we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  1  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Tmmp  Organization 
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address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  fde  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy.mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4,2016,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Tmmp  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  1  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
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lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  aplausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  colmnnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
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publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  onNovember  5,  2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hides  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
statement  by  Storm  denying  ever3dliing  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning.  Pecker 
spoke  to  Trump. 
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25.  On  or  about  November  8, 2016,  Trump  won  the  election  for  President  of  the  United 

States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 


have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  brealdng.  I  loiew  the  allegation  to  be  false,  but  /  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  {'\..the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 
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b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  eampaign  was  a  party  to  the  transaetion  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  eampaign  eontribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 

d.  On  or  about  March  9,  201 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump 
or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the  election. 
Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  bis  own  statements  Cohen  has 
admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment  occurred 
less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about 
bis  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford 
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existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident  that 
Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

28.  Therefore,  there  is  probable  cause  to  believe  that  a  search  of  the  Subject  Devices 
will  reveal  evidence,  fruit  and  instrumentalities  of  the  Subject  Offenses,  including  the  following: 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or 
their  agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 
documents,  and  any  conummications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump 
and/or  agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal, 
or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker, 
and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford,  and/or 
Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination 
or  consultation  with  the  Tmmp  Campaign. 

e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or 
associates  of  the  Tmmp  Campaign  about  the  Access  Hollywood  tape. 

f.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws, 
campaign  contribution  reporting  requirements,  and  campaign  contribution  limits. 
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g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject 
Offense,  including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 

in.  Procedures  for  Searching  ESI 
A.  Review  of  ESI 

29.  Law  enforcement  persormel  (including,  in  addition  to  law  enforcement  officers  and 
agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related 
proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  persormel  assisting  the 
government  in  this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under 
government  control)  will  review  the  ESI  contained  on  the  Subject  Devices  for  information 
responsive  to  the  warrant. 

30.  In  conducting  this  review,  law  enforcement  persormel  may  use  various  methods  to 
locate  evidence,  fhiits,  and  instrumentalities  of  the  Subject  Offense,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails,  texts  or  files  contained  on  the  Suhj  ect  Devices.  This 
method  is  analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine 
which  paper  evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other 
methods  as  well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and 
similar  methods  are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial 
matter,  keyword  searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated 
with  emails,  including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store 
data  as  searchable  text.  Moreover,  even  as  to  text  data,,  keyword  searches  cannot  be  relied  upon 
to  capture  all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of 
the  unique  words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and 
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consequently  there  are  often  many  communications  in  an  account  that  are  relevant  to  an 
investigation  but  that  do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

IV.  Conclusion  and  Ancillary  Provisions 

3 1 .  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 

32.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  and  for  the 
reasons  more  fully  set  forth  in  the  Accompanying  Affidavit,  I  respectfully  request  that  this  affidavit 
and  all  papers  submitted  herewith  be  maintained  under  seal  until  the  Court  orders  otherwise. 


Special  Agent,  US  AO 


Sworn  to  before  me  on 
7th  day  of  April,  2018  i , 

HON.  HEmY  B.  PITMAN  ,  ; 
UNITED:  STAfES  MAG  1S;TRATE  JUDGE 
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Attachment  A 

I.  Devices  to  be  Searched 

The  devices  to  be  searched  (the  “Subject  Devices”)  are  described  as: 

a.  Subject  Device- 1 :  A  black  and  red  U SB  drive  with  a  white  label  that  says  “Tracking 

#:  180208140208.” 

b.  Subject  Device-2\  A  silver  DVD  with  a  white  label  that  reads  “Cohen  - 

2018.03.07.” 

c.  Subject  Device-3:  A  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  -  Google 

andl&l.” ^ . 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Devices  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”),  as  listed  below: 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 
documents,  and  any  communications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen 
McDougal,  or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker,  and/or 
Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford, 
and/or  Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 
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e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape, 
f  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits, 
g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject  Offense, 
including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 
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Exhibit  A 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant 


PILED 


United  States  District  Court 


for  the 

District  of  Columbia 


l-f  2017 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

INFORMATION  ASSOCIATED  WITH  THE  EMAIL 
ACCOUNT^^^^^H^GMAIL.COM 


AsslgneaToi'Howell.B^ylA. 

seizure  «.rran. 


SEARCH  AND  SEIZURE  WARRANT 


-To: - Any-authorized-law-enforcement-officer- 


An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  Northern  District  of  _ California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 


See  Attachment  A. 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized)'. 


See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  August  1,2017  (not  to  exceed  14  days) 

^  in  the  daytime  6:00  a.m.  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  propeirty  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken, 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  .  Hon,  Beryl  A.  Howell  .  . 

(United  States  Magistrate  Judge) 

□  Pursuant  to  1 8  U.S.C.  §  3 1 03a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
propeirty,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ disy  5  (not  to  exceed  30)  □  until,  the  facts  justifying,  the  later  Specific  date  of  _ , _ ^  , 


Date  and  time  issued: 


Judge 's  signature 


City  and  state: 


yVashington,  DC 


f 


Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 
Printed  name  and  title 
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AO  93  (Rev  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 


Case  No.: 


Inventory  made  in  the  presence  of: 


Date  and  tinp  warrant  executed:  Copy  of  warrant  and  inventory  left  with: 


Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


I  \^&c?6<^-^0n07\q~  } 


FILE© 

M  2 1  2017 

C*|rfe,  U.s.  District  and 
Binkruptcy  Courts 


Certiilciitton 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Date: 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
l@graail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by 
Google,  a  company  headquartered  at  1600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 


I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
■session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

and _ _ _ _ _ _ . 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution)  and  18  U.S.C.  §  1956  (money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an 
unregistered  foreign  agent)  and  the  Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  61 1 
et  seq.,  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,  2016,  including,  for 
each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  EEC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
EEC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

_ _ _ ^.forej  gn  principals;  _ - _ _ _ 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine  i 

the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  '■ 

to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s- state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

i.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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Exhibit  B 
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AO  93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  tlie 

District  of  Columbia 

Case:  1:17-mj-00865 
Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
Assign.  Date :  11/13/2017 
Description:  Search  and  Seizure  Warrant 

SEARCH  AND  SEIZURE  WARRANT 

-To^ - ^Any-authorized-law-eaforeemenfoSieer— - - ^ - ^ ^ - - 

An  application  by  a  federal  law  enforcenrent  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  Northern  District  of  California 

(identify  the  person  or  describe  the  prop'ertyi  to  be  searched  and  give  its  locaiion)'. 

See  Attachment  A. 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the property  to  be  seized)'. 

See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  wannnt  on  or  before  November  20,  2017  (not  to  exceed  14  days) 

^  in  the  daytime  6:00  a.m,  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warcant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,- the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  dr  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 

as  required  by  law  and  promptly  return  this  wairant  and  inventory  to _ Hon.  Beryl  A.  Howell  _ . 

(United  States  Magistrate  Judge) 

O  Pursuant  to  18  U.S.C.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U,S..C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who.  Or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for  days  (not  to  exceed  JO)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _ . 

Date  and  time  issued:  •A 

City  and  state:  Washington,  DC  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  title 


In  the  Matter  of  the  Seai'ch  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ) 

INFORMATION  ASSOCIATED  WITH  THE  EMAIL  ) 

ACCOUNT  ^^^^^■iGMAlL.COM  -) 

) 
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AO  93  (Rev.  1 1/1 3)  Search  and  Seizure.  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventoiy  made  in  the  presence  of ; 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

^ ; Certifleatibn 

I  declare  rmder  penalty  qf  perjury  that  this  inventqi'y  is  correct  and  .was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Date:  . . .  . 

Exeaiitmg  officer 's  signature 


Printed  nanie  and  title 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
l@gniail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Google,  a  company  headquartered  at  1600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  Or  control  of  the  Google  (hereinafter  ‘The  Provider”)}  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

aT^  The  contents  of  all"em7ailsh^ciated  wthThe  account,  including  stored  or  preserved^ 
copies  of  emails  sent  to  and  from  the  account,  di'aft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  Information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  Alt  records  pertaining  to  commxuiicatiohs  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  Which  the  account  was  created,  the  length  of  ser  vice,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  Other  user  names  associated  With  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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f.  All  search  history  or  web  history; 

g.  All  records  indicaiting  the  seiwiees  available  to  subscribers  of  the  accounts; 

h.  All  usemarnes  associated  with  or  sharing  a,  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
- — —addresseSi— Electronic -Serial-dNlumbers-(AESNA),— Mobile— Electronic— Identity 

Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  ("SIM”),  Mobile  Subscriber 
Integrated  Seiwices  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

n.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wire  fraud),  18  U.S.C,  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  611  et  seq.,  involving  Michael  Dean 
Cohen  and  occurring  On  dr  after  June  1,  2015,  including,  for  each  account  or  identifier  listed  oii 
Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to.  a' 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  frinds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c.  Repords  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  deteimine 
_ the-geographic-an(iehronologicaLcontextQ£ac-COUDt  aceea^s,jise,_and  events  relating, 

to  the  crimes  under  investigation  and  to  the  accbunt  owner; 

Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

The  identity  of  any  perspn(s) — ■including  records  that  help  reveal  the  whereabouts 
of  the  personfs) — who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 

Review  PrbtpcDls 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 


f 


III. 
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Exhibit  C 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  50  of  80 


AO-93  (Rev.  ll/l3)Seareh3nd  Seizure  Warrant 


UNITED  States  District  Court  .  . 

for  the 

District  of  Columbia 

Case:  i;17-mj“"00854 
Assigned  To  :  Chief  Judge  Howeli,  Beryl  A. 
Assign,  Date :  11/13/2017 
Description:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 

ipo: - Any-authoi-ized-law-enfercement-offieer - - - - - 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  Northern  District  of  _  California 

(identify  the  person  or  describe  the  property  to  be  searobed  and  give  i(s  location)  '. 

See  Attachment  A. 


1  find  that  the  afFidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  propeity 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized)'. 

See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  wairant  on  or  before  November  20,  2017  (not  to  exceed  14  days) 

Sif  in  the  daytime  6:00  a.m.  to  10:00  p.m.  O  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  Or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  plaCe  where  the 
property  was  taken, 

The  officer  executing  this  wairant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  -warrant  and  Inventory  to  Hon.  Beryl  A,  Howell  . 

(United  States  Magistrate  Judge) 

□  Pursuant  to  18  U.S.G.  §  3103a(b),  I  find  that  immediate  notification  inay  have  an  adverse  result  listed  in  18  U,S,C, 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
propeity,  will  be  searched  or  seized  (check  the  appropriate  box) 

P  for _ days  (not  to  exceed  30)  □  until,  the  facts  justifyihg,  the  later  specific  date  of  _ _  • 

Date-  and  time  issued:  //  / / 

7  '  ^  "  Judge 's s'igriature 

City  and  state:  Washington,  DC  Hpn.  Beryl  A.  Mowell,  Chief  U.S.  District  Judge 

Printed  name  and  title 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  tin;  property  to  be  searched  ) 

or  identify  theperson  by  name  and  address) 

JNEDBMATION  ASSOCIATED  WITH  THE  ACCOUNT  ) 

HHHP^^^^Hwhich  is  stored  at  the  ) 

^^t^REMISES  OF  1&1  INTERNET,  iNC.  ) 
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AO  93  (Rev,  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.; 

.Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with; 

Inventory  made  in  the  presence  of  -: 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


1  declare,  under  penalty  of  pequry  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Date:  _ _  _  _ _ _ _ _ 

Executing  officer 's  signatiire 


Printed  nam^  6nd  title 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  email  I 
is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by  l&l  Internet,  Inc,  (‘T&l”),  an 
electronic  communication  arid/or  remote  computing  service  provider  headquartered  in  Sunnyvale, 
California. 
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ATTAGEfMENT  B 

I.  Information  to  be  disclosed  by  l&l 

To  the  extent  that  the  infoiTnation  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  l&l  (hereinafter  “the  Provider’*),  regardless  of  whether  such  infonhation 
is  stored,  held  or  maintained  inside  or  outside  of  the  United  States^  and  including  uny  emails, 
records,  files,  logs,  or  information  that  have  been  deleted  but  ai’e  still  available  to  the  Provider,  the 
Provider  is  required  to  disclose  the  following  information  to  the  government  for  each  account  or 
identifier  listed  in  Attachment  A; 

™a;  ThecontentsofalTemaiis-assoeiated  with  the^accDuntpifrcludhigstored  or  preserved' 

copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone ,  numbers  and  other  identifiers, 
records  of  session  times  and  durations,,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registmtion,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  sei-vice  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  eontaet  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used,  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  ali  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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fi  All  search  history  or  web  history; 

g.  All  records  indicating  the  sei-vices  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  of  browser  cookie  with 
the  accounts; 

i.  All  cookies,  iriciuding  tliW-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  witli  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 

_ i _ addresses,„JEleclroBic:„_SeriaLJMumhers^(PESN’i),_-MoMe_Ekictronic__Idehtit_y_ 

Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  ("MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
flMEI”), 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fraits, 
and/or  instrumentalities  of  violations  of  18  U.S.G.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wiie  fraud),  18  U.S.C.  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  ah  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  ("FARA”),  22  U.S.C.  §  611  et  seq.,  involving  Michael  Dean 
Cohen,  including,  for  each  account  or  identifier  listed  on  Attachment  A,  inforination  pertaining  to 
the  following  rnatters; 

a.  Communications,  records,  documeiits,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  accoairt  Or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
- ^ ^ — ^the-geographic-and-chronological  context  Of  aeeountaGGes&,mse,^ and  events  relating- 

to  the  crimes  under  investigation  and  to  the  account  owner; 
f  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  ■  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 

that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s)— who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Coheh  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals, 

in.  Review  Protocols 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorhey’-client  and  other 
operative  privileges.  When  appropriate,  the  proCeduies  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  D 
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AO  93  (Rev,  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  properly  to  be  searched 
or  ideiilij)i  the  person  by  name  and  address) 

INFORMATION  ASSOCIATED  WITH  THE  APPLE  ID 
^^^^^■a)GMAIL.COM  THAT  IS  STORED  AT 
PREMISES  CONTROLLED  BY  APPLE,  INC. 


) 


Case:  17-mj-00570 
Assigned  To  ;  Howell,  Beryl  A. 

Assign  Date  :  8/7/2017 

Description:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Northern _  District  of  _  California 

(identify  the  person  or  describe  the  property  to  he  searched  and  give  its  location)'. 


See  Attachment  A. 


I  find  that  the  affldavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized)'. 


See  Attachment  B, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


.Aygtistai,  2017 


(not  to  exceed  14  days) 


sf  in  the  daytime  6:00  a.m.  to  10:00  p.m.  O  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 

as  required  by  law  and  promptly  return  this  warrant  and  inventory  to _ _  Hon.  Beryl  A.  Hovyell  . . . . , 

(United  States  Magistrate  Judge) 

.  □  Pursuant  to  18  U.S.C.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ days  (not  to  e.\ceed30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _ _ _ _  -  _ _  * 


Date  and  time  issued: 

City  and  state:  Washington,  DC 


Judge 's  signature 

Hon,  Beryl  A.  Howell,  Chief  U.S.  District  Judge 


Printed  name  and  title 
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AO  93  (Rev,  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.; 

Date  and  time  warrant  executed; 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized; 

Certificatioft 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  Judge. 


Date:  .  — . . 

"  Executing  officer  s  signature 


Printed  name  and  title 
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ATTACHMENT  A 


This  warrant  applies  to  information  associated  with  the  Apple  ID 
l@gmaii.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Apple,  Inc.  (“Apple”),  a  company  headquartered  at  1  Infinite  Loop,  Cupertino,  CA  95014. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Apple,  Inc. 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  Apple,  Inc.  (hereinafter  "the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 


a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

— ^ - and - - - - - ^ - 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEl”). 

11.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18U.S.C,  §  1344 (bank fraud),  18  U.S.C.  §  1956(money  laundering),  ISU.S.C.  §951 
(acting  as  an  unregistered  foreign  agent),  and  22  U.S.C.  §  6 1 1  et  seq.  (Foreign  Agents  Registration 
Act),  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,2016,  including,  for  each 
account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
LLC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

— - — foreign-principals; - - - - — - 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

i.  The  identity  of  any  person(s)— including  records  that  help  reveal  the  whereabouts 
of  the  person(s)- — ^who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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Exhibit  E 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


El  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l@gmail.com,  . 
I@gmail.com,  and 

Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the' provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  @gmail.com,  ^^^B@gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attaclrments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  It  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  throngh  which  the  Provider  is  capable  of  accepting 
service.  ■ 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 

existencemf  this-Warranirand'Orderto-thedisted  subscribemrlo-anyother-person-fora-period-of 

180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice,  ' 

3.  Sealing.  It  is  further  ordered  that  tins  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  seiwe  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Chief  United''St^t9's'Mag|sfta.le ’Judge 
Southern  District pl;‘Ne#!,^cirk' 


;■  G0®ENSTBINr 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitiieatre  Pai'kway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  accormt 
l^gmail.coni  (the  “Subject  Account”)  for  the  time  period  referenced  below. 
-Arlaw-enforcemenf  officer-will-serve-this-warranPby-tr-ansmitting-it-via-  email  or-another- 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  IE  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account; 

a.  Email  content.  All  emails  sent  to  or  fi:om,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  ofthis  warrant, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  ,  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
~witlrthe“Subject“Accountrinciuding‘complaints7inquiriesvor-other-contacts-wittsupport-serviees- 

and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  D  eceinber  1,2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  ofthis 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gehats  associated  with  the  Subject  Aceount,  limited  to  items  sent,  received,  or  created 
between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

ni.  Review  of  Information  by  the  Government 

Law  enforcement  persoimel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  .attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  m  this  investigation,  and  outside  technical  experts  imder  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
andinstiumentahties  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  deftaud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statementstoa  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Cornmurdcations,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
B  ank,  Melrose  Credit  Union,  and/or  taxi  medalhons ; 

c7~^CmTinmnTcations,~Tecords;~documentsrand~other  filesdnyolving-a-^plam  proposal— or- 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  habilities,  to  others,  including  to^^^^^^^^|and/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to'or  fcom  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plaii  or  proposal  or. agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  to  ^^^^^^^^|md/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
■to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institation;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

EvidehcA^indicatingThASubJ^ttAccotmfWner’sTntenfwttrelatesAD^the^Subject 

Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  firom  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
■  Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts  ^^^^gmaihcom  and (the  “Subject  Accounts”)  for  the  time 
period-hetween-Qctoher-l,-20-16-and-theAate-of-this-warrant,-inclusive - .. — 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  helow.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  helow. 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  AJl  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  ff  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subj  ect  Accounts, 
including  any  ff  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquhies,  or  other  contacts  with  support  services 


sndrecordsmf  actionsdaken- 


f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 


Accounts. 

g.  Associated  content.  AU  Google  Docs,  files  maintaiaed  on  Google  Drive,  'and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  ofinformation  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical,  experts  under  government  control)  are 
-authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18U.S.C.  §§  371  (conspiracyto  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(whe  fraud),  and  1344  (banlc  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Coirnnunications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabihties,  to and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communrcated."wittrthe'“Subject-Accounts-about-any-matters-relathig-to-any-plau-or-proposal-or 
agreement  for  Michael  D,  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^^^|and/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Mehose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  husiness  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  natoe  of  any  financial  hansactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Exhibit  F 
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UNTIED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
_Assocmted  with  the  Email  Account 
maintained 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


- Search  WAiaiAi^TYiM)]N^DN=^DiscLOSimOM)E^^ 

TO:  1  &  1  Intemet,  Inc.  (“Provider”) 


United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pui'suant  to  the  provisions  of  the 

Stored  Communications  Act,  18  U.S.C.  §.  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 

provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 

cause  to  believe  the  email  accounl^^^U^^^^^^^naintained  at  premises  controlled  by  1 

&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crhne,  all  as  specified  hr 

Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 

Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  m 


Section  II  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  requhed  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  tbe  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 


ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 


existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessaryyexcept'that“ProviderTnay''disclose-this-Warranhand-Order-to-an  attomey-for-Provider- 
for  the  purpose  of  receiving  legal  advice, 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


/  .- 


Date  Issued 


Thne  Is,'"'“'^ 


02.28.2018 
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Email  Search  Attachment  D 

I.  Subject  Account  and  Execution  of  Warrant 

This  waiTant  is  directed  to  1  &  1  Memet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  aU  content  and  other 
informationwithinthe  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
(the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 

and-the-date  of-this-warranVinclusive, - ^ - - - 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  toformation  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To’the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content  All  emails  sent  to  or  &om,  stored  in  draft  form  hi,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

h.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  P  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  P  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  conespondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 

^MdreconiErof  actioiBtak^  ^  ^ 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  apresei-vation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

TTT.  Review  of  Information  by  the  Government 

Lawenforcementpersonnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entdes);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  otlrer  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files'  involving  Sterling  National 
Banlc,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 


02.28.2018 
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medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 


Jhd/or 


entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 


e.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 


Consultants,  LLC,  or  about  anyplan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


and/or  entities  associated  with  him; 


liabilities,  to  others,  including  to 


f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  mstitution  with- relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  busmess  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flo-wing  ihto  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  mstitution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 


02.28.2018 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pmsuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 
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18MA0 

UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  re;  Warrant  and  Order  For  Prospective 
and  Historical  Location  Information  and 
Pen  Register  Information  for  the 
Cellphones  Assigned  Call  Numbers 


USAO  Reference  No.  2018R00127 


2957 

WARRANT  AND  ORDER 

18  Mag. _ 


Warrant  and  Order 

for  Cellphone  Location  Information  and  Pen  Register  Information 
and  for  Sealing  and  Non-Disclosure 

TO;  AT&T  (“Service  Provider”),  and  any  subsequent  provider  of  service  to  the  Target 
Cellphones  specified  below  (“Subsequent  Service  Provider”) 

United  States  Attorney’s  Office  and  Federal  Bureau  of  Investigation  (“Investigative 
Agencies”) 

Upon  the  Application  and  Agent  Affidavit  submitted  by  the  Government  in  this  matter; 

I.  Findings 

The  Court  hereby  finds; 

1 .  The  Target  Cellphones  (the  “Target  Cellphones”)  that  are  the  subject  of  this  Order  are 

assigned  call  numbers  andHHj^^^,  are  subscribed  to  in  the  name  of  Michael 

Cohen  (the  “Subscriber”)  and  are  currently  serviced  by  the  Service  Provider. 

2.  Pursuant  to  18  U.S.C.  §  2703(c)(1)(A)  and  the  applicable  provisions  of  Rule  41  of  the 
Federal  Rules  of  Criminal  Procedure,  the  Government’s  application  sets  forth  probable  cause  to 
believe  that  the  prospective  and  historical  location  information  for  the  Target  Cellphone  will  reveal 
evidence,  fruits,  or  instrumentalities  of  suspected  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and 
30109(d)(l)(A)(l)  (“the  Subject  Offense”). 

3.  Pursuant  to  18  U.S.C.  §  2703(d),  the  Government’s  application  also  sets  forth  specific 
and  articulable  facts  showing  that  there  are  reasonable  grounds  to  believe  that  the  historical 
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location  information  and  toll  records  for  the  Target  Cellphone  are  relevant  and  material  to  an 
ongoing  eriminal  investigation. 

4.  Pursuant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  eertified  that  the  pen  register 
information  for  the  Target  Cellphones  is  relevant  to  an  ongoing  investigation  by  the  Investigating 
Ageneies  of  Miehael  Cohen  and  others  unknown  in  eonneetion  with  suspeeted  violations  of  the 
Subjeet  Offense. 

5.  Pursuant  to  18  U.S.C.  §  2705(b),  there  is  reason  to  believe  that  notification  of  the 
existence  of  this  Warrant  and  Order  will  result  in  destruetion  of  or  tampering  with  evidence,  danger 
to  the  physieal  safety  of  an  individual,  flight  from  prosecution,  and/or  intimidation  of  potential 
witnesses,  or  otherwise  will  seriously  jeopardize  an  ongoing  investigation. 

NOW, THEREFORE, pursuantto Fed. R.  Grim. P.41, 18 U.S.C.  §§  3121  etseq.,  18  U.S.C. 
§§  2701  et  seq.,  and  18  U.S.C.  §  3103a,  IT  IS  HEREBY  ORDERED: 

II.  Order  to  Service  Provider 

6.  Service  Provider.  This  Order  shall  apply  to  the  Serviee  Provider  specified  above,  and 
to  any  subsequent  provider  of  serviee  to  the  Tafget  Cellphones  without  need  for  further  Order  of 
this  Court. 

7.  Prospective  Location  Information.  The  Service  Provider  shall  provide  to  the 
Investigating  Agencies  on  a  prospeetive  basis,  for  a  period  of  45  days  from  the  date  of  this  Order 
(or  the  date  that  the  Target  Cellphones  are  seized,  whichever  domes  first),  information  eonceming 
the  loeation  of  the  Target  Cellphones  (“Prospeetive  Location  Information”),  including  all 
available: 

a.  preeision  location  information,  including  GPS  data,  E-911  Phase  II  data,  and 
latitude-longitude  data;  and 
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b.  cell  site  data,  including  any  data  reflecting  (a)  the  cell  towers  and  sectors  thereof 
utilized  in  routing  any  phone,  text,  or  data  communication  to  or  from  the  Target  Cellphones,  and 
(b)  the  approximate  range  of  the  target  phone  from  the  cell  towers  during  the  communication 
(including  per-call  measurement  (“PCM”)  or  round-trip  time  (“RTT”  or  “NELOS”)  data); 

8.  Historical  Location  Information  and  Toll  Records.  The  Service  Provider  shall 
provide  to  the  Investigating  Agency  all  available  historical  cell  site  location  information  reflecting 
the  cell  towers  and  sectors  thereof  utilized  in  routing  any  phone,  text,  or  data  conummication  to  or 
from  the  Target  Cellphones,  and  the  approximate  range  of  the  target  phone  from  the  cell  towers  ^ 
during  the  communication  (PCM/RTT  or  NELOS  data),  for  the  period  from  October  1,  2016 
thiw^h4te-d^e-«fthis‘^nfe  as  well  as  all  available  toll  records  (including  call  detail,  SMS  detail, 
or  data  session  detail  records)  for  the  communications.  j  ^ 


9.  Pen  register  with  caller  identification  and/or  trap  and  trace  device.  The  Service 
Provider  shall  provide  to  the  Investigating  Agencies,  for  a  period  of  60  days  from  the  date  of  this 
order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first),  all  dialing,  routing, 
addressing,  or  signaling  information  associated  with  each  voice,  text,  or  data  communication 
transmitted  to  or  from  the  Target  Cellphones,  including  but  not  limited  to: 

a.  any  unique  identifiers  associated  with  the  phone,  including  ESN,  MEIN, 
MSISDN,  IMSI,  IMEI,  SIM,  MIN,  or  MAC  address; 

b.  source  and  destination  telephone  numbers  and/or  Internet  protocol  (“IP”) 

addresses;^ 


^  The  Service  Provider  is  not  required  to  provide  post-cut-through  dialed  digits  (“PCTDD”),  or 
digits  that  are  dialed  after  a  telephone  call  from  the  Target  Phone  has  been  connected.  If  possible, 
the  Service  Provider  will  forward  only  pre-cut-through-dialed  digits  to  the  Investigative  Agency. 
However,  if  the  Service  Provider’s  technical  capabilities  require  it  to  forward  all  dialed  digits, 
including  PCTDD,  to  the  Investigative  Agency,  the  Investigative  Agency  will  only  decode  and 
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c.  date,  time,  and  duration  of  the  eonununieation;  and 

d.  eell-site  information  as  speeified  above. 

10.  Technical  Assistance.  The  Serviee  Provider  shall  furnish  the  Investigating  Ageney  all 
information,  faeilities,  andteehnieal  assistanee  neeessary  to  aeeomplish  the  diselosure  of  all  of  the 
foregoing  information  relating  to  the  Target  Cellphones  unobtrusively  and  with  the  minimum 
interference  to  the  service  presently  provided  to  the  Subscriber. 

1 1 .  Non-Disclosure  to  Subscriber.  The  Service  Provider,  including  its  affiliates,  officers, 
employees,  and  agents,  shall  not  disclose  the  existence  of  this  Warrant  and  Order,  or  the  underlying 
investigation,  to  the  Subscriber  or  any  other  person,  for  a  period  of  180  days  from  the  date  of  this 
Warrant  and  Order,  subject  to  extension  upon  application  to  the  Court,  if  necessary. 

III.  Additional  Provisions 

12.  Compensation  for  Costs.  The  Investigating  Agency  shall  compensate  the  Service 
Provider  for  reasonable  expenses  incurred  in  complying  with  the  Warrant  and  this  Order. 

13.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Application  and  Agent  Affidavit, 
shall  be  sealed  until  otherwise  ordered  by  the  Court,  except  that  the  Government  may  without 
further  order  of  this  Court:  serve  this  Warrant  and  Order  on  the  Service  Provider;  provide  copies 
of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent  Affidavit  as  need  be  to 


forward  to  the  agents  assigned  to  the  investigation,  the  numbers  that  are  dialed  before  the  call  is 
cut  through. 
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personnel  assisting  the  Government  in  the  investigation  and  prosecution  of  this  matter;  and 
disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

Dated;  New  York,  New  York 


( :  rs  r 


Date  Issued 


Time  Issued 


-Dl  JUDGE 

Southern  District  of  New  York 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


18 MAG  2957 


In  re:  Warrant  and  Order  For 
Prospective  and  Historical  Location 
Information  and  Pen  Register 
Information  for  the  Cellphones 
Assigned  Call  Numbers 

USAO 


and 

No.  2018R00127 


Reference 


APPLICATION 
18  Mag. _ 


Application  for  Warrant  and  Order 
for  Cellphone  Location  and  Pen  Register  Information 

The  United  States  of  America,  by  its  attorney,  Robert  Khuzami,  Attorney  for  the  United 
States  Acting  Under  Authority  Conferred  by  28  U.S.C.  §  5 15,  Assistant  United 

States  Attorney,  of  counsel,  respectfully  requests  that  the  Court  issue  the  accompanying  proposed 
Warrants  and  Orders  for  prospective  and  historical  location  information  and  pen  register 
information  for  two  cellphones  (the  “Target  Cellphones”).  As  grounds  for  this  Application  the 
Government  relies  on  the  following  facts  and  authorities. 

I.  Introduction 

1 .  I  am  an  Assistant  United  States  Attorney  in  the  U.  S .  Attorney ’  s  Office  for  the  Southern 
District  of  New  York.  This  Application  is  submitted  in  conjunction  with  the  accompanying 
affidavit  of  a  law  enforcement  agent  (“Agent  Affidavif’),  to  be  sworn  before  this  Court,  and 
incorporated  by  reference  herein.  I  make  this  Application  based  on  information  and  belief, 
including  the  Agent  Affidavit,  my  review  of  other  documents  in  the  case,  and  information  received 
from  investigative  personnel. 
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2.  The  Investigating  Ageney,  Target  Cellphones,  Subseriber,  Target  Subjeet(s),  Serviee 
Provider,  Subjeet  Offenses,  Sueeessor  Serviee  Provider,  and  Sueeessor  Cellphones  refereneed  in 
this  Application  are  as  specified  in  the  Agent  Affidavit. 

II.  Legal  Authority 

A.  Prospective  Location  Information 

3.  The  Government  seeks  to  obtain  both  precision  location  information  and  cell  site  data 
for  the  Target  Cellphones  on  a  prospective  basis  (the  “Prospective  Location  Information”)  for  a 
period  of  45  days  from  the  date  of  this  order  -  the  same  period  of  time  for  which  a  warrant  for  a 
tracking  device  may  be  granted  imder  Rule  41(e)(2)(C).  It  bears  noting,  however,  that  while  the 
Prospective  Location  Information  may  permit  “tracking”  the  user  of  the  phone  in  the  colloquial 
sense,  this  is  not  an  application  for  a  warrant  for  a  “tracking  device”  as  defined  in  Fed.  R.  Crim. 
P.  41(a)(2)(E)  and  18  U.S.C.  §  3 1 17(b).  Those  provisions  only  apply  where  an  agent  is  seeking  to 
physically  install  a  tracking  device  on  a  given  object.  Instead,  the  Prospective  Location 
Information  will  be  obtained  by  requiring  the  Service  Provider  to  provide  the  information. 

4.  The  authority  for  this  application  is  found  in  18  U.S.C.  §§  2703(c)(1),  which  authorizes 
a  court  of  competent  jurisdiction  to  require  any  electronic  communication  service  provider  (which 
includes  a  cellular  telephone  service  provider^)  to  disclose  any  “record  or  other  information 
pertaining  to  a  subscriber”  other  than  the  “contents  of  communications,”  when  the  government 
obtains,  inter  alia,  a  warrant  under  the  procedures  of  Rule  41.  See  18  U.S.C.  §  2703(c)(l)(A).^ 

^  See  18  U.S.C.  §  2711(1)  (incorporating  by  cross-reference  statutory  definitions  set  forth  in  18 
U.S.C.  §  2510);  18  U.S.C.  §  2510(15)  (defining  “electronic  communication  service”  as  “any 
service  which  provides  to  users  thereof  the  ability  to  send  or  receive  wire  or  electronic 
communications”) . 

^  Another  provision  of  18  U.S.C.  §  2703(c)(1),  specifically,  §  2703(c)(1)(B),  enables  the 
Government  to  compel  an  electronic  communication  service  provider  to  disclose  non-content 
information  pertaining  to  a  subscriber  by  obtaining  an  order  issued  under  18  U.S.C.  §  2703(d), 
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Because  data  concerning  a  subscriber’s  location,  such  as  precision  location  information  and  cell 
site  data,  constitutes  “information  pertaining  to  a  subscriber”  that  does  not  include  the  “contents 
of  communications,”  that  data  is  among  the  types  of  information  available  under  §  2703(c)(l)(A).^ 
Further,  as  specified  in  18  U.S.C.  §  271 1(3),  this  Court  is  a  court  of  competent  jurisdiction  under 
the  Stored  Communications  Act  because  it  has  jurisdiction  over  the  Subject  Offenses. 

5.  The  Government’s  request  for  cell  site  data  also  implicates  the  pen  register  statute, 
because  such  data  constitutes  signaling  information  used  by  the  Service  Provider  to  route 


communications  to  and  fiom  the  Target  Cellphones.  In  order  to  collect  such  data,  a  valid  pen 
register  order  is  required."^  Accordingly,  I  hereby  certify  pursuant  to  18  U.S.C.  §  3122  that  such 


instead  of  a  warrant.  Rather  than  requiring  a  showing  of  probable  cause,  a  §  2703(d)  order  requires 
only  a  showing  that  there  are  reasonable  grounds  to  believe  that  the  information  sought  is  relevant 
and  material  to  an  ongoing  criminal  investigation.  However,  given  that  continued  monitoring  of 
an  individual’s  specific  location  through  precision  location  information  arguably  implicates  Fourth 
Amendment  interests,  see  United  States  v.  Jones,  565  U.S.  400,  418  (2012)  (Alito,  J.,  concurring 
in  the  judgment),  the  Government  here  seeks  to  obtain  the  Precision  Location  Information  sought 
herein  by  a  §  2703(c)  warrant  rather  than  a  §  2703(d)  order. 

^  See  In  re  Application,  460  F.  Supp.  2d  448,  459-60  &  n.  55  (S.D.N.Y.  2006)  (Kaplan,  J.) 
(cellphone  location  information  falls  within  §  2703(c)(1));  flccorri,  e.g..  United  States  v.  Caraballo, 
963  F.  Supp.  2d  341,  361  (D.Vt.  2013);  In  re  Order,  632  F.  Supp.  2d  202,  207  (E.D.N.Y.  2008); 
In  re  Application,  405  F.  Supp.  2d  435,  444-45  (S.D.N.Y.  2005).  But  see  In  re  Application,  849 
F.  Supp.  2d  526,  574  (D.Md.  201 1)  (rejecting  view  that  cellular  location  data  falls  within  the  scope 
of  the  SCA  and  finding  that  phone  must  be  treated  as  “tracking  device”  for  purposes  of  Rule  41 
where  used  to  collect  location  data);  In  re  Application,  2009  WL  159187,  at  *5-*6  (S.D.N.Y. 
Jan.  13,  2009)  (McMahon,  J.)  (same). 

^  See  18  U.S.C.  §  3121  (prohibiting  use  of  pen  register  or  trap  and  trace  device  without  an  order 
under  the  pen  register  statute);  3127(3)  &  (4)  (defining  pen  register  and  trap  and  trace  device  to 
include  devices  or  processes  that  record,  inter  alia,  signaling  information).  Although  cell  site  data 
constitutes  “signaling”  information  within  the  meaning  of  the  pen  register  statute,  a  separate  statute 
precludes  the  Government  fiom  relying  “solely”  on  the  authority  provided  by  the  pen  register 
statute  to  ascertain- a  subscriber’s  location.  47  U.S.C.  §  1002(a).  Here,  the  Government  seeks  to 
obtain  such  data  pursuant  to  18  U.S.C.  §  2703(c)  as  well  as  the  pen  register  statute,  rather  than 
“solely”  under  the  latter  statute.  See  In  re  Application,  460  F.  Supp.  2d  at  456-59. 
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signaling  information  is  relevant  to  an  ongoing  investigation  being  conducted  by  the  Investigating 
Agency  into  suspected  violations  of  the  Subject  Offenses  by  the  Target  Subject(s). 

B.  Historical  Location  Information 

6.  The  Government  also  seeks  historical  cell  site  data  for  the  Target  Cellphones  for  the 
period  from  October  1, 2016  to  the-presoat  (the  “Historical  Location  Information”).  Because  such 
data  constitutes  non-content  information  concerning  a  subscriber,  the  Court  is  authorized  to  order 
the  Service  Provider  to  provide  this  data  pursuant  to  a  warrant  application  under  18  U.S.C.  § 


2703(c)  or  an  application  for  an  order  under  18  U.S.C.  §  2703(d).  See  18  U.S.C.  §  2703(c)(1)(B). 
Pursuant  to  18  U.S.C.  §  2703(d),  I  respectfully  submit  that  the  Agent  Affidavit  offers  specific  and 
articulable  facts  showing  that  there  are  reasonable  grounds  to  believe  that  the  Historical  Location 
Information  is  relevant  and  material  to  an  ongoing  criminal  hivestigation.  Further,  although  a 
warrant  for  the  Historical  Location  Information  is  not  required,  I  respectfully  submit  that  the  same 
probable  cause  supporting  the  Government’s  request  for  a  warrant  to  obtain  the  Prospective 
Location  Information  requested  above  also  supports  the  issuance  of  a  warrant  under  §  2703(c)  for 
the  Historical  Location  Information.^  In  addition,  the  Government  seeks  toll  records  for  the  same 


^  A  warrant  is  not  required  to  obtain  historical  cell  site  information.  Individuals  do  not  have  a 
reasonable  expectation  of  privacy  in  historical  cell  site  information  because  individuals  voluntarily 
convey  that  information  to  third-party  service  providers.  See  United  States  v.  Graham,  824  F.3d 
421,  424-25  (4th  Cir.  2016)  {en  banc)',  United  States  v.  Davis,  785  F.3d  498,  511-13  (11th  Cfr. 
2015)  {en  banc),  cert,  denied,  136  S.  Ct.  479  (2015);  In  re  Application  of  US.  for  Historical  Cell 
Site  Data,  724  F.3d  600,  614-15  (5th  Cir.  2013);  United  States  v.  Guerrero,  768  F.3d  351,  358-59 
(5th  Cir.  2014);  see  also  United  States  v.  Pascual,  502  F.  App’x  75,  80  &  n.6  (2d  Cir.  2012),  cert, 
denied,  134  S.  Ct.  231  (2013)  (“general  principles”  of  third-party  doctrine  “point[  ]”  toward  this 
conclusion  regarding  cell-site  records);  but  see  United  States  v.  Ulbricht,  858  F.3d  71,  97  n.29  (2d 
Cir.  2017)  (declining  to  express  its  view  as  to  whether  the  Fourth  Amendment  applies  to  historical 
cell  site  location  information).  Moreover,  because  historical  cell  site  information  does  not  enable 
law  enforcement  to  conduct  live  monitoring  of  a  person’s  location  within  private  spaces  such  as 
“the  interior  of  the  [person’s]  home,”  it  is  not  comparable  to  prospective  precision  location 
information,  for  which  a  warrant  is  arguably  required.  See  In  re  Application  of  US.  for  Order 
Directing  Provider  of  Elec.  Commc’n  Serv.  to  Disclose  Records  to  Gov’t,  620  F.3d  304,  312-15 
(3d  Cir.  2010).  Nevertheless,  because  the  Supreme  Court  has  recently  granted  certiorari  to  review 
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period  as  the  Historical  Location  Information  is  requested,  which  the  Government  is  also 
authorized  to  obtain  pursuant  to  18  U.S.C.  §2703(d). 

C.  Pen  Register  Information 

7.  Finally,  the  Government  seeks  an  order  pursuant  to  18  U.S.C.  §§  3121-26  authorizing 
the  use  of  a  pen  register  on  the  Target  Cellphones  for  a  period  of  60  days  from  the  date  of  this 
order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first).  Specifically,  the 
Government  seeks  an  order  directing  the  Service  Provider  to  furnish  any  information,  facilities, 


and  technical  assistance  necessary  to  operate,  unobtrusively  and  with  minimum  disruption  of 
service,  a  pen  register  and  trap  and  trace  device  to  capture  all  dialing,  routing,  addressing,  or 
signaling  information  associated  with  each  call  transmitted  to  or  from  the  Target  Cellphones,  as 
specified  further  in  the  proposed  Warrant  and  Order  (the  “Pen  Register  Information”).® 

8.  I  hereby  certify  pursuant  to  18  U.S.C.  §  3122  that  the  Pen  Register  Information  is 
relevant  to  an  ongoing  investigation  being  conducted  by  the  Investigating  Agency  into  suspected 
violations  of  the  Subject  Offenses  by  the  Target  Subject(s). 


the  Sixth  Circuit’s  decision  in  United  States  v.  Carpenter,  819  F.3d  880,  887-90  (6th  Cir.  2016) 
(holding  Government’s  collection  of  business  records  containing  historical  cell  site  data  did  not 
constitute  search  under  Fourth  Amendment),  cert,  granted,  137  S.  Ct.  2211  (June  5,  2017)  (No. 
16-402),  the  Government,  in  an  abundance  of  caution,  requests  a  warrant  under  18  U.S.C.  § 
2703(c),  upon  articulation  of  probable  cause  as  set  forth  in  the  Agent  Affidavit. 

®  The  Government  is  also  not  seeking  authorization  to  obtain  post-cut-through  dialed  digits 
(“PCTDD”),  or  digits  that  are  dialed  after  a  telephone  call  from  the  Target  Phone  has  been 
connected.  Pursuant  to  the  attached  Order,  if  possible,  the  Provider  will  forward  only  pre-cut- 
through-dialed  digits  to  the  Investigating  Agency.  However,  if  the  Provider’s  technical 
capabilities  require  it  to  forward  all  dialed  digits,  including  PCTDD,  to  the  Investigating  Agency, 
the  Investigating  Agency  will  only  decode  and  forward  to  the  agents  assigned  to  the  investigation 
the  numbers  that  are  dialed  before  the  call  is  cut  through. 
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D.  Sealing  and  Non-Disclosure  Order  to  Service  Provider 

9.  When  the  Government  obtains  records  or  information  under  §  2703(c),  it  is  not  required 
to  notify  the  subscriber  or  customer.  18  U.S.C.  §  2703(c)(3).  Additionally,  the  Government  may 
obtain  an  order  precluding  the  Provider  from  notifying  the  subscriber  or  any  other  third-party  of 
the  warrant  or  order  obtained,  for  such  period  as  the  Court  deems  appropriate,  where  there  is  reason 
to  believe  that  such  notification  will  result  in  endangering  the  life  or  physical  safety  of  an 
individual,  flight  from  prosecution,  destruction  of  or  tampering  with  evidence,  or  intimidation  of 
potential  witnesses,  or  will  otherwise  seriously  jeopardize  the  investigation.  18  U.S.C.  §  2705(b). 

10.  Further,  18  U.S.C.  §  3123(d)  provides  that  an  order  directing  installation  of  a  pen 
register  or  trap  and  trace  device  shall  direct  the  pertinent  service  provider  “not  to  disclose  the 
existence  of  the  pen  register  or  trap  and  trace  device  or  the  existence  of  the  investigation  to  the 
listed  subscriber,  or  to  any  other  person  unless  or  until  otherwise  ordered  by  the  Court.” 

11.  Accordingly,  as  explained  further  in  the  Agent  Affidavit,  in  light  of  the  confidential 
nature  of  the  continuing  criminal  investigation  and  the  adverse  consequences  expected  in  the  event 
of  premature  notification,  the  Government  respectfully  requests  that  the  Court  direct  the  Service 
Provider  not  to  notify  the  Subscriber  or  any  other  person  of  the  Warrant  and  Order  sought  herein 
for  a  period  of  180  days,  subject  to  extension  upon  application  to  the  Court,  if  necessary. 

12.  For  similar  reasons,  I  respectfully  request  that  the  proposed  Warrant  and  Order,  this 
Application,  and  the  accompanying  Agent  Affidavit,  be  maintained  under  seal  until  the  Court 
orders  otherwise,  except  that  the  Government  be  permitted  without  further  order  of  this  Court  to 
serve  this  Warrant  and  Order  on  the  Service  Provider;  provide  copies  of  the  Warrant  and  Order  or 
the  supporting  Application  and  Agent  Affidavit  as  need  be  to  personnel  assisting  the  Government 
in  the  investigation  and  prosecution  of  this  matter;  and  disclose  these  materials  as  necessary  to 

comply  with  discovery  and  disclosure  obligations  in  any  prosecutions  related  to  this  matter. 
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III.  Prior  Requests 

14.  Except  as  may  be  set  forth  above,  no  prior  request  for  the  relief  requested  herein  has 
been  made. 

Dated:  New  York,  New  York 
April?,  2018 


Assistant  United  States  Attorney 
Tel.:  (212) 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


AGENT  AFFIDAVIT 

18  Mag. , _ 

Agent  Affidavit  in  Support  of  Warrant  and  Order 
for  Cellphone  Location  and  Pen  Register  Information 

STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  Agent||^^^^^^^H|  of  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states: 

I.  Introduction 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (“Investigating  Agency”).  As  such,  I  am  a  “federal  law  enforcement  officer”  within 
the  meaning  of  Federal  Rule  of  Criminal  Procedure  41(a)(2)(C),  that  is,  a  government  agent 
engaged  in  enforcing  the  criminal  laws  and  duly  authorized  by  the  Attorney  General  to  request  a 
search  warrant.  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I  previously 
served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector  General  from 
May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these  positions,  I  have 
participated  in  numerous  investigations  involving  the  use  of  cellphone  location  data. 

2.  Requested  Information.  I  respectfully  submit  this  Affidavit  pursuant  to  18  U.S.C. 
§§  2703(c)  and  (c)(1)(A)  and  the  applicable  procedures  of  Federal  Rule  of  Criminal  Procedure  41; 
18  U.S.C.  §§  2703(d)  &  2705;  and  18  U.S.C.  §§  3121-3126,  in  support  of  a  warrant  and  order  for 
prospective  location  information,  historical  location  information,  toll  records,  and  pen  register 


In  re:  Warrant  and  Order  For  Prospective 
and  Historical  Location  Information  and 
Pen  Register  Information  for  the 
CeUnhone^Assigned  Cal^Numhem 

USAO  Reference  No.  2018R00127 
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information,  for  the  Target  Cellphones  identified  below  (eolleetively,  the  “Requested 
Information”). 

3.  Basis  for  Knowledge.  This  Affidavit  is  based  upon  my  participation  in  the 
investigation,  my  exanunation  of  reports  and  records,  and  my  conversations  with  other  law 
enforcement  agents  and  other  individuals,  as  well  as  my  training  and  experience.  Because  this 
Affidavit  is  being  submitted  for  the  limited  purpose  of  obtaining  the  Requested  Information,  it 
does  not  include  all  the  facts  that  I  have  learned  during  the  course  of  this  investigation.  Where  the 
contents  of  documents  and  the  actions,  statements,  and  conversations  of  others  are  reported  herein, 
they  are  reported  m  substance  and  in  part,  except  where  otherwise  indicated.  In  addition,  unless 
otherwise  indicated,  statements  by  others  referenced  in  this  Affidavit  were  not  necessarily  made 
to  me,  but  may  have  been  provided  to  me  by  someone  else  to  whom  I  have  spoken  or  whose  report 
I  have  read  (and  who  in  turn  may  have  had  either  direct  or  indirect  knowledge  of  the  statement). 
Similarly,  unless  otherwise  indicated,  information  in  this  Affidavit  resulting  from  surveillance 
does  not  necessarily  set  forth  my  personal  observations,  but  may  have  been  provided  to  me  by 
other  law  enforcement  agents  who  observed  the  events,  and  to  whom  I  have  spoken  or  whose 
report  I  have  read. 

4.  Target  Cellphones,  Subscriber,  Target  Subject,  and  Service  Provider.  The  Target 
Cellphones  referenced  in  this  Affidavit  are  the  cellphones  assigned  call  numbers 
and^^^^^^^|,  As  further  discussed  below,  the  Target  Cellphones  are  subscribed  to  in  the 
name  of  Michael  Cohen  (the  “Subscriber”).  The  Subscriber  is  believed  to  use  the  Target 
Cellphones  and  is  a  Target  Subject  of  this  investigation.  AT&T  is  the  Service  Provider  for  the 
Target  Cellphones. 
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5.  Precision  Location  Capability.  Cellphone  service  providers  have  technical 
capabilities  that  allow  them  to  collect  at  least  two  kinds  of  information  about  the  locations  of  the 
cellphones  to  which  they  provide  service;  (a)  precision  location  information,  also  known  as  E-91 1 
Phase  II  data,  GPS  data,  or  latitude-longitude  data,  and  (b)  cell  site  data,  also  known  as 
“tower/face”  or  “tower/sector”  information.  Precision  location  information  provides  relatively 
precise  location  information  about  a  cellphone,  which  a  provider  can  typically  collect  either  via 
GPS  tracking  technology  biiilt  into  the  phone  or  by  triangulating  the  device’s  signal  as  received 
by  the  provider’s  nearby  cell  towers.  Cell  site  data,  by  contrast,  reflects  only  the  cell  tower  and 
sector  thereof  utilized  in  routing  any  communication  to  and  from  the  cellphone,  as  well  as  the 
approximate  range  of  the  cellphone  from  the  tower  during  the  conummication  (sometimes  referred 
to  as  “per-call  measurement”  (“PCM”)  or  “round-trip  time”  (“RTT”  or  ‘TSIELOS”  data).  Because 
cell  towers  are  often  a  half-mile  or  more  apart,  even  in  urban  areas,  and  can  be  ten  or  more  miles 
apart  in  rural  areas,  cell  site  data  is  typically  less  precise  than  precision  location  information.  Based 
on  my  training  and  experience,  I  know  that  the  Service  Provider  has  the  technical  ability  to  collect 
precision  location  information  from  any  cellphone  on  its  network,  including  by  initiating  a  signal 
on  the  Service  Provider’s  network  to  determine  the  phone’s  location.  I  further  know  that  cell  site 
data  is  routinely  collected  by  the  Service  Provider  in  the  course  of  routing  calls  placed  to  or  from 
any  cellphone  on  its  network.^ 

6.  Successor  Service  Provider.  Because  it  is  possible  that  the  Target  Subject  may  change 
cellphone  service  provider  during  the  course  of  this  investigation,  it  is  requested  that  the  warrant 


^  Toll  records  are  sometimes  necessary  or  helpful  in  order  to  obtain  or  interpret  historical  cell  site 
data  and  are  therefore  also  requested  herein. 
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and  investigative  order  requested  apply  without  need  for  further  order  to  any  Sueeessor  Serviee 
Provider  who  may  provide  serviee  to  the  Target  Cellphones  during  the  time  frames  at  issue  herein. 

II.  Facts  Establishing  Probable  Cause 

7.  Although  I  understand  that  probable  eause  is  not  neeessary  to  obtain  all  of  the 
Requested  Information,  I  respeetfully  submit  that  probable  eause  exists  to  believe  that  the 
Requested  Information  will  lead  to  evidenee  of  the  erime  of  52  U.S.C.  §§  30116(a)(1)(A)  and 
30109(d)(l)(A)(l)  (illegal  eampaign  eontributions)  (the  “Subjeet  Offense”),  as  well  as  the  loeation 
of  the  Target  Subjeet  who  is  engaged  in  the  Subjeet  Offense. 

Introduction 

8.  The  USAO  and  the  Federal  Bureau  of  Investigation  (the  “FBI”)  are  investigating  a 
criminal  violation  of  the  eampaign  finanee  laws  by  Michael  Cohen,  a  lawyer  who  holds  himself 
out  as  the  personal  attorney  for  President  Donald  J.  Trump.  As  detailed  below,  there  is  probable 
cause  to  believe  that  Cohen  made  an  excessive  rn-ldnd  contribution  to  the  presidential  election 
campaign  of  then-candidate  Donald  Trump  in  the  form  of  a  $130,000  payment  to  Stephanie 
Clifford,  an  individual  who  was  rumored  to  have  had  an  extramarital  affair  with  Tmmp,  in 
exchange  for  her  agreement  not  to  disclose  that  alleged  affair  on  the  eve  of  the  2016  presidential 
election. 

Prior  Relevant  Process 

9.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the  Special 
Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United 
States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and  other 
content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search  warrant 
for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  My  1 8, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 


in  the  account 


@gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 


January  1,  2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warranf ’). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


fegmail.com  (the 


content  stored  in  the  iCloud  account  associated  with  Apple  ID 


“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1 , 20 1 5  and  November  1 3 , 20 1 7 
(the  “Second  Cohen  Gmail  Warrant”). 


d.  On  or  about  November  1 3,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


(the  “Cohen  MDCPC  Account”)  sent  or  received 


emails  in  the  account 


between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the  US  AO, 
which  is  working  with  the  FBI’s  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other  accounts,  sent  or 
received  between  November  14,  2017  and  February  28,  2018  (the  “Third  Cohen  Gmail  Warrant” 
and  “Second  Cohen  MDCPC  Warrant”). 


^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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12.  The  above-described  warrants  are  referred  to  herein  as  the  “Cohen  Emails  Warrants” 
and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  fdm  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11, 2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untme  and  ridiculous  story  .  .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit  .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential  campaign. 
On  or  about  May  4, 20 1 6,  Tmmp  became  the  presumptive  Republican  Party  nominee  for  president, 
and  on  July  19,  2016,  Tmmp  officially  became  the  nominee.  Based  on  my  review  of  public 
sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as  part  of  the 
Tramp  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of  Tramp  or  his 
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campaign.  For  instance,  on  or  about  August  1 8, 20 1 6,  Cohen  appeared  on  CNN  to  defend  Trump’s 
polling  numbers. 

15.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “Fve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  Icnow  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

1 6.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate  magazine 
by,  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about  October  2016, 
Clifford  was  in  discussions  with  ABC ’s  Good  Morning  America  show  and  Slate  magazine,  among 
other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her  alleged 
relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 
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17.  From  my  review  of  telephone  toll  records^  and  information  produced  pursuant  to  the 
iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,^  Tramp,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  For  these  text  messages  and  calls — as  well  as 
all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving  Cohen — Cohen  used  one  of 


the  Target  Cellphones  for  the  communication. 

18.  Based  on  the  timmg  of  the  calls  in  the  days  following  the  Access  Hollywood  story,  and 
the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  ftom  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8,  2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  ftom  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^ 


^  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  obtained  ftom  Cohen’s  telephone 
pursuant  to  the  iCloud  Warrant. 

^  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
fdend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Tramp  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Tramp’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  tallcing  to  Hicks. 
After  the  Cohen-Tramp  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Tramp’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  leam  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Based  on  the  toll  records  that  the  US  AO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  fom  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  cormected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
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“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f  The  following  day,  on  October  10,2016,  at  10:58  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump. ^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement '  agreement  and  mutual 

^  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blanlc.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10,  2016. 

19.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps  to 
complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which  Cohen 
could  transfer  fimds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews  with  employees  of 
First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day,  another 
employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete.  Cohen 
returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy  of  his 
driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he  wanted  to 
fhnd  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  17,  2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen  and 
Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford,  and 
they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential  election. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  iCloud 
Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’ s  email  account  hosted  by  the  Trump  Organization,  on  October  1 7 , 20 1 6,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^  According  to  the  article,  Davidson  sent  Cohen  a  second 
email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her  settlement 
agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they  spoke  for 
over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told  they’re 
going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.”  Based 
on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard  that 
Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5 :25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6 :44  p.m.,  Howard  responded  to  Cohen’s  text,  stathig:  “Not  taking  my  calls.” 
Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?”  Howard 
responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this  investigation,  I 


^  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  Government  has  not 
requested  documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the 
email  referenced  in  this  article. 
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understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson  about  the 
matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes, 
c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  andmugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 

21 .  On  or  about  October  25, 2016,  the  communications  between  Cohen,  Davidson,  Howard 
and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford.  Specifically, 
based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

h.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — ^less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipf  ’  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  him,  in  smn  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  First  Republic  Employee-2  that  he 
was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-1”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1:00  a.m.,  First  Republic 
Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee-1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen,  hr  response  to  a  series  of  know-your-customer 
questions  about  the  purpose  of  the  accormt — ^the  answers  to  which  First  Republic  Employee- 1 
entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the  “Essential 
Consultants  Accounf ’)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  ftom  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Accormt. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  ftom  my  private  account.”  ha  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27, 2016,  Cohen  made  a  payment  to  Davidson  of  $  1 30,000 — ^with  the  funds 
intended  for  Clifford — for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 
Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  EEC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction  with 
Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28,  2016,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1 :21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanlcs 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
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$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy.mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was  completed  and 
just  four  days  before  the  presidential  election,  the  Wall  Street  Journal ^vblishQd  an  article  alleging 
that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy  model 
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Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed  to 
pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  'For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson,  hideed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5,  2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s 
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working!  ”  Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary, 
I  have  a  statement  by  Storm  denying  ever5dhing  and  contradicting  the  other  pom  stars  statement. 
I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced 
recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a 
statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was 
urmecessary  at  that  time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that 
morning.  Pecker  spoke  to  Trump. 

25.  On  or  about  November  8,  2016,  Tmmp  won  the  election  for  President  of  the  United 

States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  fded  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  oh  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
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also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
rmusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  C\..the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  201 8,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 
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d.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  banlc.” 

27.  For  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  Cohen  used  the  Target 
Cellphones  to  commit  the  Subject  Offense.  Cohen  used  the  Target  Cellphones  to  communicate 
with  Davidson,  Howard,  Pecker,  and  others  about  the  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  Cohen  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $1 30,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  communicated — ^using  the  Target  Cellphones — ^with  members  of  the  Trump  campaign 
and  others  about  his  negotiation  with  Clifford’s  attorney  and  the  need  to  preclude  Clifford  from 
making  a  statement  that  would  have  reflected  negatively  on  the  candidate  in  advance  of  the 
forthcoming  election. 

28. 1  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned,  in  substance 
and  in  part,  that  the  Target  Cellphones  are  still  active.  Based  on  my  training  and  experience,  my 
familiarity  with  this  investigation,  and  the  information  set  forth  above,  I  therefore  believe  that  the 
Requested  Information  will  lead  to  evidence  of  the  Subject  Offense.  Specifically,  the  Requested 
Information  includes  historical  location  data  for  the  Target  Cellphones,  which  may  show  where 
the  Target  Cellphones — and  by  extension  Cohen — rwas  on  particular  dates  and  times  between 
October  1,  2016 — ^the  approximate  time  that  negotiations  regarding  the  Clifford  payment  began — 
and  the  present.  That  location  information  can,  among  other  things,  be  used  to  corroborate  any  in- 
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person  meetings  between  the  Cohen  and  the  other  individuals  involved  in  the  negotiations  of  the 
the  payment  to  Clifford. 

29.  Based  on  my  training  and  experience,  I  also  know  that  historical  location  information 
can  be  useful  to  establish  a  pattern  of  behavior  by  a  particular  individual,  which  assists  law 
enforcement  in  tracking  such  an  individual — and,  thereby,  locating  his  electronic  devices.  Along 
with  the  historical  information,  the  prospective  information  will  also  lead  to  the  present  location 
of  the  Target  Cellphones;  law  enforcement  may  then  obtain  evidence  from  the  Target  Cellphones, 
by  subpoena  or  search  warrant,  including  but  not  limited  to  contact  lists  containing  contact 
information  for  participants  in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages 
between  these  participants. 

III.  Request  for  Warrant  and  Order 

30.  Based  on  the  foregoing  I  respectfully  request  that  the  Court  require  the  Service  Provider 
to  provide  the  Requested  Information  as  specified  further  in  the  Warrant  and  Order  proposed 
herewith,  including  prospective  precision  location  and  cell  site  data  for  a  period  of  45  days  from 
fhe  date  of  this  Order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first), 
historical  cell  site  data  and  toll  records  for  the  period  from  October  1,  2016  through  th©-date..ofdais 

Ij 

Order,  and  pen  register  information  for  a  period  of  60  days  from  the  date  of  this  Order. 

3 1 .  Nondisclosure.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not 
publicly  known.  As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  Warrant 
and  Order  could  alert  potential  criminal  targets  that  they  are  under  investigation,  causing  them  to 
destroy  evidence,  flee  from  prosecution,  or  otherwise  seriously  jeopardize  the  investigation. 
Accordingly,  I  respectfully  request  that  the  Provider  be  directed  not  to  notify  the  subscriber  or 
others  of  the  existence  of  the  Warrant  and  Order  for  a  period  of  1 80  days,  and  that  the  Warrant  and 
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Order  and  all  supporting  papers  be  maintained  under  seal  until  the  Court  orders  otherwise,  as 
specified  in  the  Application  submitted  in  conjunction  with  this  Affidavit. 


United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me, this 
7fhj3ayjx£Aprii,i2Q.I& 


‘^-7  . 


HONOI^&LE  HENRY  PITMAN 
United  States  Magistrate  Judge 
Southern  District  of  New  York 


I 
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m  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE 
CELLULAR  DEVICES  ASSIGNED  CALL 
NUMBERS  AND 


3574 


AFFIDAVIT  IN  SUPPORT  OF 

AN  APPLICATION  FOR  A  SEARCH  WARRANT 

being  first  duly  sworn,  hereby  depose  and  state  as  follows: 

INTRODUCTION  AND  AGENT  BACKGROUND 

1 .  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  mider 

Federal  Rule  of  Criminal  Procedure  41  to  authorize  law  enforcement  to  employ  an  electronic 
investigative  technique,  which  is  described  in  Attachment  B,  to  determine  the  location  of  the 
cellular  devices  assigned  call  numbers  (the  “Target  Cellular 

Devices”),  which  ai-e  described  in  Attachment  A. 

2.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I 
have  been  a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training 
in  these  positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a 
wide  array  of  financial  crimes,  including  offenses  involving  public  corruption.  I  also  have 
training  and  experience  executing  warrants  for  cellphone  location  data 

3.  Tlie  facts  in  this  affidavit  come  Ifom  my  personal  observations,  my  training  and 
experience,  and  information  obtained  from  other  agents  and  witnesses.  This  affidavit  is  intended 
to  show  merely  that  there  is  sufficient  probable  cause,  for  the  requested  warrant  and  does  not  set 
forth  all  of  my  Icnowledge  about  this  matter. 
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4.  One  purpose  of  appl5dng  for  this  warrant  is  to  determine  with  precision  the  Target 
Cellular  Devices’  location.  However,  there  is  reason  to  believe  the  Target  Cellular  Devices  are 
currently  located  somewhere  within  this  district  because  the  Target  Cellular  Devices’  owner  is 
known  to  spend  most  of  his  time  in  this  district.  Pursuant  to  Rule  4 1  (b)(2),  law  enforcement  may 
locate  the  Target  Cellular  Devices  outside  the  district  provided  the  device  is  within  the  dishict 
when  the  warrant  is  issued. 

5.  Based  on  the  facts  set  forth  in  this  affidavit,  there  is  probable  cause  to  believe  that 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”)  has  been  committed,  are  being  committed,  and  will  be  committed  by 
Michael  Cohen  and  others.  There  is  also  probable  cause  to  believe  that  the  location  of  the  Target 
Cellular  Devices  will  lead  to  evidence  of  the  Subject  Offense,  as  detailed  below. 

6.  Because  collecting  the  information  authorized  by  this  warrant  may  fall  within  the 
statutory  definitions  of  a  “pen  register”  or  a  “trap  and  trace  device,”  see  18  U.S.C.  §  3127(3)  & 
(4),  this  warrant  is  designed  to  comply  with  the  Pen  Register  Statute  as  well  as  Rule  41.  See  18 
U.S.C.  §§  3121-3127.  This  warrant  therefore  includes  all  the  information  required  to  be  included 
in  a  pen  register  order.  See  18  U.S.C.  §  3 123(b)(1). 

PROBABLE  CAUSE 
Introduction 

7.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York 

(“US AO”)  and  the  FBI  are  investigating  a  criminal  violation  of  the  campaign  finance  laws  by 

Michael  Cohen,  a  lawyer  who  holds  himself  out  as  the  personal  attorney  for  President  Donald  J. 

Trump.  As  detailed  below,  there  is  probable  cause  to  believe  that  Cohen  made  an  excessive  in- 

kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald  Timmp  in  the 
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form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an 
extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair 
on  the  eve  of  the  2016  presidential  election. 

8.  The  Target  Cellular  Deviees  referenced  in  this  Affidavit  are  the  eellphones 


assigned  eall  numbers 


I  As  further  diseussed  below,  the  Target 


Cellular  Devices  are  subscribed  to  in  the  name  of  Michael  Cohen  (the  “Subseriber”).  The 
Subscriber  is  belieyed  to  use  the  Target  Cellphones  and  is  a  Target  Subject  of  this  investigation. 


AT&T  is  the  Sei'vice  Provider  for  the  Target  Cellphones. 

Prior  Relevant  Process 

9.  In  conneetion  with  an  hivestigation  then  being  condueted  by  the  Office  of 
the  Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell, 
Chief  United  States  District  Judge  for  the  District  of  Columbia,  three  seareh  warrants  for  emails 
and  oilier  content  information  assoeiated  with  two  email  aeeounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  aecount  used  by  Cohen.  Speeifically: 

a.  On  or  about  July  1 8,  20 1 7,  the  FBI  sought  and  obtained  a  seareh  warrant  for  emails 
in  the  aecoun^^^^^^^J^gmailcom  (the  “Cohen  Gmail  Aeeount”)  sent  or  reeeived  between 
January  1,  2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
content  stored  in  the  iCloud  aecount  associated  with  Apple  ID  ^^^^^|@gmail.eom  (the 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  1 3 ,  20 1 7,  the  FBI  sought  and  obtained  a  seareh  warrant  for 
emails  in  the  Cohen  Gmail  Aeeount  sent  or  reeeived  between  June  1 , 20 1 5  and  November  13,2017 
(the  “Second  Cohen  Gmail  Warrant”). 
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d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  ^^Q^^B^^|[the  “Cohen  MDCPC  Account”)  sent  or  received 
between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen 
to  the  USAO,  which  is  working  with  the  FBFs  New  York  Field  Office. 

 11.  On  or  about  February  28,  2018,  the  USAO  and  FBI  sought  and  obtained 

search  warrants  for  emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other 
accounts,  sent  or  received  between  November  14,  2017  and  February  28,  2018  (the  “Third  Cohen 
Gmail  Warrant”  and  “Second  Cohen  MDCPC  Warrant”).^ 

12.  The  above-described  waiTants  ai'e  referred  to  herein  as  the  “Cohen  Emails 
Warrants”  and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 


'  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  Icnow  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  fi'om  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

2  On  or  about  February  28,  2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  artiele,  based  on  the  report  m 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  artieles. 

b.  Speeifically,  on  or  about  October  11,  2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  artiele 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  Oetober 
12,  2011,  Cohen,  who  was  then  Exeeutive  Vice-President  and  Special  Counsel  to  the  Trump, 

Organization,  stated  to  E!  News  that  “[t]he  totally  mitrue  and  ridiculous  story  .  .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Oi'ganization  would  like  to  thank  and  commend 
Stoitny  Daniels  and  her  attorneys  for  their  honesty  and  swift  aetions.” 

14.  On  or  about  June  16,  2015,  Trump  formally  launehed  his  2016  presidential 
eampaign.  On  or  about  May  4,  20 1 6,  Trump  became  the  presumptive  Republiean  Party  nominee 
for  president,  and  on  July  19,  2016,  Trump  offieially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  offieial  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  eampaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

1 5 .  On  or  about  October  7, 20 1 6,  The  Washington  Post  published  online  a  video 

and  accompanying  audio  in  which  Trump  referred  to  women  m  what  the  aifrele  described  as 

“vulgar  terms”  in  a  2005  eonversation  with  Billy  Bush,  who  was  then  the  host  of  Access 

Hollywood.  The  following  day,  on  Oetober  8,  2016,  Trump  appeared  in  a  video  in  whieh  he 

stated,  among  other  things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this 
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more  than  a  decade  old  video  are  one  of  them.  Anyone  who  Icnows  me  loiows  these  words  don’t 
reflect  who  I  am.  I  said  it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public 
sources,  I  also  know  that  representatives  of  the  Tiiimp  Campaign  stated,  in  sum  and  substance, 
that  the  Access  Hollywood  comment  was  an  old  and  isolated  incident. 

16.  Based  on  my  review  of  public  sources,  includmg  an  article  published  in 
Slate  magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about 
October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and  Slate 
magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her 
alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  2011 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

17.  From  my  review  of  telephone  toll  records^  and  information  produced 
pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days 
following  the  Access  Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and 
emails  with  Keith  Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard 


^  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 


6 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  7  of  62 


of  American  Media,  Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,^  Trump,  and  Hope 
Hicks,  who  was  then  press  secretai'y  for  Trump’s  presidential  campaign.  For  these  text  messages 
and  calls — as  well  as  all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving 
Cohen — Cohen  used  one  of  the  Target  Cellular  Devices  for  the  communication. 

1 8 .  Based  on  the  timing  of  the  calls  in  the  days  following  the  Access  Hollywood 
story,  and  the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these 
communications  concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake 
of  the  Access  Hollywood  stoiy.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
on  the  telephone  about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October 


Pecker  is  President  of  AMI  and,  according  to  his  ovm  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  loiow  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Tmmp  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  another  law  enforcement  agent  who  has  spoken  to  a  law  enforcement  agent 
who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated,  in  substance,  to  the  best  of  her 
recollection,  she  did  not  learn  about  the  allegations  made  by  Clifford  until  early  November  2016. 
Hicks  was  not  specifically  asked  about  this  three-way  call. 
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8,  2016,  Cohen  and  Trump  had  spoken  once  m  May,  once  in  June,  once  in  July,  zero  times  in 
August,  and  twice  in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  unmediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
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response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that 
said:  “Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you 
wake,  please  call  my  cell.” 

f  The  following  day,  on  October  10, 2016,  at  10:58  a.m.,  Howard  sent  atext  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regai'ds  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  wMr  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text 
message  that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to 
be  today.  Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on 
my  participation  in  this  investigation,  I  beUeve  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affah  with 
then-candidate  Trump.® 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
Icnow  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agi-eement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 


®  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proxunity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  CUfford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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pseudonym  in  “confidential  settlement  agi'eement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blanlc.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10,  2016. 

19.  It  appears  that  on  October  13, 2016,  and  the  days  that  followed,  Cohen  took 
steps  to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records, 
information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records 
maintained  by  First  Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews 
with  employees  of  First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  13, 20 16,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  otlrer  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  malce 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Banlc  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
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of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  fonned  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  die  account.  Later  that  day, 
another  employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete. 
Cohen  returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy 
of  his  driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he 
wanted  to  fund  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  fded  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appeal's  that  the  negotiation  between 
Cohen  and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client, 
Clifford,  and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the 
presidential  election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  and  public  sources,  I  Icnow  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  fluiTy  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: _ ^ _ 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  awai-e?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heai'd 
that  Clifford  was  going  to  take  her  story  of  an  exti'amarital  affair  with  Tramp  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howai-d  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5 :03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  talcing  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 

^  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 


12 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  13  of  62 


investigation,  I  understand  Howai'd’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokmgGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affah  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. ,  

21.  On  or  about  October  25,  2016,  the  communications  between  Cohen, 
Davidson,  Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving 
Clifford.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
Cohen  Email  Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned 
the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howai'd  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next 
half  hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about 
eight  minutes.  At  7: 1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Tramp 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — less  than  thirty  minutes  after  speaking  with  Tmmp^ — 

Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
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Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two 
minutes  later  at  9:06  a.m.  and  with  the  certification  of  fonnation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  hhn,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  First  Republic  Employee-2  that  he 
was  at  Tmmp  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-l”),  a  preferred  banlcer  at  that  branch,  to  assist  Cohen.  At  1 1:00  a.m..  First  Republic 
Employee-1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee-1,  that  ai'ound  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization^ — and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  Icnow-your-customer 
questions  about  the  purpose  of  the  accoimt — ^the  answers  to  which  First  Republic  Employee- 1 
entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  fi'om  First  Republic,  it  appears  that  this  account  (the  “Essential 
Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an 

attorney  client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Aceount  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republie  to  the 
Essential  Consultants  Aeeount.  Following  the  transfer,  at  approximately  4:15  p.m.  on  Oetober 
26,  2016,  First  Republie  Employee-2’ s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Aceount. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Aeeount  and  then  forwarded  it  to  Davidson. 

 g.  At  6:37  p.m.,  Cohen  asked  Peeker  by  text  message,  “Can  we  speak?  Imp^ortant.” 
Cohen  called  Pecker  at  6:49  p.m.  and  eoimected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  eonneeted  for  about  thuty  seeonds.  At  7:06  p.m.,  Cohen  ealled  Peeker  again  and  they  spoke 
for  nearly  thuteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  baek  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“eheck  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subjeet  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Exeeuted  agreement,  hand-signed  by 
Keith’s  client  and  retmired  via  overnight  or  same-day  FedEx  to  Miehael,  -  Change  of  agreement 
to  reflect  the  eorreet  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  eserow  until  receipt 
of  agr'eement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — 
with  the  funds  intended  for  Clifford^ — ^for  the  purpose  of  securing  her  ongoing  silence  witli  respect 
to  the  allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my 
review  of  toll  records,  banlc  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and 
Cohen  Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 
your  assistance  and  look  fomard  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  Fhst  Republic 
Bank,  Cohen  completed  papeiwork  to  wire  $130,000  from  the  Essential  Consultants  Account^ — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Banlc  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confnm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  coiporation,  (Essential  Consultants  EEC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disbui'se.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  hhn  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the 
transaction  with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  public  sources,  and  banlc  records,  I  know  the  following: 

a.  On  October  28,  2016,  at  11:48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  comiected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m,,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomon'ow.”  Cohen  responded  “Thanlc  you”  to  Howard  and  “Thanlcs 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  couil;  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  infonnation  pertaining  to  [Dennison]”  in  exchange  for 
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$130,000.  The  agreement  provided  that  “EC,  LLC”  would  whe  the  funds  to  “Peterson’s” 
attorney,  who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of 
“EC,  LLC.”  The  agreement  stated  drat  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in 
the  agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Banlc  to  a  banlc  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 

settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attaclunent  was 
titled  “Stormy.mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but 
it  appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to 
Kellyanne  Conway,  who  at  the  time  was  Tramp  ’  s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was 
completed  and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an 
article  alleging  that  the  National  Enquirer  had  “Shielded  Donald  Tramp”  from  allegations  by 
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Playboy  model  Karen  McDongal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI 
had  agreed  to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented 
by  Davidson.  Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen 
Email  Warrants  and  iCloud  Warrant,  and  public  sources,  it  appeal's  that  Cohen  spoke  frequently 
to  Davidson,  Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication^ — -just  days 
before  Election  Day — ^about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  fr'om 
gaining  national  traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent 
Howard  a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump 
Organization  lawyer.  The  forwarded  email  was  fr'om  a  Wall  Street  Journal  reporter,  and  asked  for 
comment  from  Tmmp  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hides  several 
times,  including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 

really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 

minute  later,  Howard  responded:  “Ell  ask  him  again.  We  just  need  her  to  disappear*.”  Cohen 

responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  caimot  push  her.” 

At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 

want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 

investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’ s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based 

on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated 
“he’s  pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal 
could  publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment 
from  AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  fr-ee?”  A  mmute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quicldy?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Ho  wal'd  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5,  2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying! !  It’s 
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working!”  Cohen  wrote  baek,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if 
neeessary,  I  have  a  statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars 
statement.  I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!” 
Based  on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  tire  above- 
referenced  recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating 
that  such  a  statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but 
was  umiecessary  at  that  time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later 

that  morning,  Pecker  spoke  to  Tmmp. 

25.  On  or  about  November  8,  2016,  Trump  won  tire  election  for  President  of 
the  United  States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that 
Cohen  arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a 
government  watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging 
that  Cohen  had  violated  campaign  finance  laws  by  maldng  the  payment  to  Clifford.  Based  on  my 
review  public  sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants,  I  have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
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keep  the  story  from  breaking.  I  Icnew  the  allegation  to  be  false,  but  /  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agi'eement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 

is  an  aclcnowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  {“...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  brealdng”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Tramp  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
pajmients  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  die  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Tramp  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 


directly  or  indfrectly.” 


22 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  23  of  62 


d.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  For  the  foregomg  reasons,  there  is  probable  eause  to  believe  that  Cohen 
eommitted  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump  or  the  Trump 
eampaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eleetion.  Indeed,  while  Cohen 
denies  having  given  an  unlawful  eontribution,  in  his  own  statements  Cohen  has  admitted  that  he 
paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment  oceun-ed  less  than  two 
weeks  before  the  eleetion,  as  Trump  was  facing  negative  media  allegations  about  his  behavior 
toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  existed  sinee 
2011. 

28.  I  have  reviewed  records  maintained  by  AT&T,  from  whieh  I  have  learned, 
m  substance  and  in  part,  that  the  Target  Cellulai-  Deviees  ai-e  still  aetive.  Based  on  my  training 
and  experience,  my  familiarity  with  this  investigation,  and  the  information  set  forth  above,  I 
therefore  believe  that  the  requested  data  will  lead  to  evidence  of  the  Subject  Offense. 
Speeifically,  information  will  lead  to  the  present  location  of  the  Target  Cellular  Devices;  law 
enforeement  may  then  obtain  evidence  from  the  Target  Cellular  Devices,  by  subpoena  or  seai'ch 
warrant,  including  but  not  limited  to  contact  lists  containing  contact  information  for  participants 
in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages  between  these  participants. 

MANKER  OF  EXECUTION 

29.  In  my  fr-aining  and  experience,  I  have  learned  that  cellular  phones  and  other 
cellular  devices  communicate  wirelessly  across  a  network  of  cellular  infrastrueture,  including 
towers  that  route  and  coimect  individual  communications.  When  sending  or  receivmg  a 
communication,  a  cellular  device  broadcasts  certain  cellular  and  wifi  signals  to  the  cellular  tower 
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that  is  routing  its  communication.  These  cellular-  and  wifi  signals  mclude  a  cellular  device’s 
unique  identifiers. 

30.  To  facilitate  execution  of  this  warrant  to  determine  the  location  of  the  Target 
Cellular  Devices,  law  enforcement  may  use  an  investigative  device  or  devices  capable  of 
broadcasting  cellular  and  wifi  signals  that  will  be  received  by  the  Tar-get  Cellular  Devices  or 
receiving  cellular  and  wifi  signals  from  nearby  cellular  devices,  including  the  Target  Cellular 

JTevices _ Such  a  device  may  function  in  some  respects  like  a  cellular  tower,  except  that  it  will  not 

be  connected  to  the  cellular  network  and  cannot  be  used  by  a  cell  phone  to  communicate  with 
otliers.  The  device  may  send  a  signal  to  the  Target  Cellular  Devices  and  nearby  cellular  devices 
and  thereby  prompt  them  to  send  cellular  and  wifi  signals  that  include  the  unique  identifier  of  the 
device.  Law  enforcement  may  monitor  the  cellular  and  wifi  signals  broadcast  by  the  Target 
Cellular  Devices  for  non-content  signal  information  and  use  that  information  to  determine  the 
Target  Cellular  Devices’  location,  even  if  it  is  located  inside  a  house,  apartment,  or  other  building. 
The  device  will  not  intercept  the  contents  of  the  Target  Cellular  Devices’  communications,  such 
as  telephone  calls,  text  messages,  and  other  electronic  communications.  Further,  the  device  will 
not  collect  any  other  data  stored  on  the  Target  Cellular  Devices,  including  e-mails,  text  messages, 
contact  lists,  images,  or  Global  Positioning  System  (GPS)  data. 

31.  The  investigative  device  may  interrupt  cellular  service  of  phones  or  other 
cellular  devices  within  its  immediate  vicinity.  Any  service  disruption  to  non-target  devices  will 
be  brief  and  temporary,  and  all  operations  will  attempt  to  limit  the  interference  with  such  devices. 
In  order  to  connect  with  the  Target  Cellular  Devices,  the  device  may  briefly  exchange  cellular  and 
wifi  signals  with  all  phones  or  other  cellular  devices  in  its  vicinity  to  determine  whether  those 
devices’  imique  identifiers  match  the  identifiers  of  the  Target  Cellular  Devices.  These  cellular 
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and  wifi  signals  may  include  cell  phone  identifiers.  The  deviee  will  not  complete  a  conneetion 
with  cellular  deviees  determined  not  to  be  the  Target  Cellular  Devices,  and  law  enforcement  will 
limit  collection  of  information  from  devices  other  than  the  Target  Cellular  Devices.  To  the  extent 
that  any  information  from  a  cellular  device  other  than  the  Target  Cellular  Devices  is  collected  by 
the  law  enforcement  device,  law  enforcement  will  delete  that  information,  and  law  enforcement 
will  malce  no  investigative  use  of  it  absent  further  order  of  the  court,  other  than  distinguishing  the 
Target  Cellulai'  Devices  from  all  other  cellular  deviees.   

AUTHORIZATION  REQUEST 

32.  Based  on  the  foregoing,  I  request  that  the  Court  issue  the  proposed  search 
warrant,  pursuant  to  Federal  Rule  of  Criminal  Procedure  41.  The  proposed  warrant  also  will 
function  as  a  pen  register  order  under  18  U.S.C.  §  3123. 

33.  I  further  request,  pm'suant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of 
Criminal  Procedure  41(f)(3),  that  the  Court  authorize  the  officer  executing  the  warrant  to  delay 
notice  until  30  days  from  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified 
because  there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant 
may  have  an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the 
subseriber  or  user  of  the  Target  Cellular  Devices  would  seriously  jeopai'dize  the  ongoing 
investigation,  as  such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence, 
change  patterns  of  behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is 
reasonable  neeessity  for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above. 
See  18  U.S.C.  §  3103a(b)(2). 
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34.  I  further  request  that  tire  Court  authorize  exeeution  of  the  warrant  at  any 
time  of  day  or  night,  owing  to  the  potential  need  to  loeate  the  Target  Cellular  Devices  outside  of 
daytime  hours. 

35.  I  further  request  that  the  Court  order  that  all  papers  in  support  of  this 
application,  including  the  affidavit  and  search  wainant,  be  sealed  until  further  order  of  the  Court. 
These  documents  discuss  an  ongoing  criminal  investigation  drat  is  neither  public  nor  known  to  all 
of  the  targets  of  the  investigation.  Accordingly,  there  is  good  cause  to  seal  these  documents 
because  their  premature  disclosure  may  seriously  jeopardize  that  investigation. 

36.  A  search  warrant  may  not  be  legally  necessary  to  compel  the  investigative 
technique  described  herein.  Nevertheless,  I  hereby  submit  this  warrant  application  out  of  an 
abundance  of  caution. 

Respectfully  submitted. 


Federal  Bureau  of  Investigation 


Subscribed  and  sworn  to  before  me  g\/  T/f ,  , 

-r  /  / 

,  I  H  i  )  /  ) 

On:  ^ 

UNITED  STAtfeS  IVIA.GISTRATE  JUDGE 
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m  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE  Case 
CELLULAR  DEVICES  ASSIGNED  CALL 


Filed  Under  Seal 


AND 


NUMBERS 


WARRANT  ANP  ORDER  OF  AUTHORIZATION 

TO;  Special  Agents  of  the  Federal  Bnreau  of  Investigation  and  Other  Authorized 

Personnel 

I.  Findings 

The  Court  hereby  finds: 

1.  Upon  an  affidavit  of  Special  Agent  of  the  Federal  Bureau  of 

Investigation  (“Affidavit”)  and  pursuant  to  Federal  Rule  of  Criminal  Procedure  41,  there  is 
probable  cause  to  believe  that  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”)  have  been  committed  by  Michael  Cohen 
(the  “Target  Subject”),  and  that  the  Target  Subject  uses  cellular  devices  assigned  call  numbers 


the  (“Target  Cellular  Devices”),  which  are  described  in 


Attachment  A.  Further,  there  is  probable  cause  to  believe  that  the  location  of  the  Target  Cellular 
Device  will  constitute  evidence  of  the  Subject  Offense.  Specifically,  there  is  probable  cause  to 
believe  that  the  location  of  the  Target  Cellular  Devices  will  constitute  evidence  of  those  criminal 
violations,  including  leading  to  the  location  of  the  Target  Cellular  Devices,  on  which  there  is 
probable  cause  to  believe  evidence  of  these  offenses  exist,  as  detailed  below. 

2.  Pursuant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  certified  that  the  pen 


register  information  for  the  Target  Cellular  Devices  is  relevant  to  an  ongoing  investigation  by  the 
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Investigating  Agency  of  the  Target  Subject  and  others  unknown  in  connection  with  suspected 
violations  of  the  Subject  Offense. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Grim.  P.  41,  18  U.S.C.  §§  3121  et  seq.,  and  18 
U.S.C.  §  3103a,  IT  IS  HEREBY  ORDERED: 

II.  Warrant  and  Order  of  Authorization 

3.  Warrant.  Law  enforcement  agents  and  other  authorized  law  enforcement 
officials  are  hereby  authorized  to  employ  an  electronic  investigative  teclmique,  which  is  described 

in  Attachment  B,  to  the  detennine  the  location  of  the  Target  Cellular  Devices,  which  ai'c  described 
in  Attachment  A. 

4.  Data  Collection  and  Retention.  In  the  course  of  employing  the  technique,  law 
enforcement  agents  and  other  authorized  law  enforcement  officials  (a)  must  make  reasonable 
efforts  to  limit  interference  with  cellular  devices  other  than  the  Target  Cellular  Devices,  (b)  must 
promptly  delete  information  collected  from  cellular  devices  other  than  the  Target  Cellulai-  Devices 
once  the  Target  Cellular  Devices  is  located,  and  (c)  are  prohibited  from  using  data  acquired  beyond 
that  necessary  to  locate  the  Target  Cellular  Devices,  absent  further  order  of  the  Court. 

5.  Delayed  Notice.  Pm’suant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of  Criminal 
Procedure  41(f)(3),  the  Court  authorizes  the  officer  executing  the  wan*ant  to  delay  in  notice  until 
30  days  from  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified  because 
there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant  may  have 
an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the  subscriber 
or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing  investigation,  as 
such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence,  change  patterns  of 
behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is  reasonable  necessity 
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for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above.  See  18  U.S.C.  § 
3103a(b)(2). 

6.  Time  of  Execution.  The  Court  authorizes  execution  of  this  Warrant  at  any  time 
of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of  daytime 
hours. 

7.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Agent  Affidavit,  shall  be 
sealed  until  fiirthp.r  order  of  the  Court,  except  that  the  Government  may  wjthqutfarthgmdgLpf 
this  Court:  provide  copies  of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent 
Affidavit  as  need  be  to  personnel  assisting  the  Government  in  the  mvestigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


U  -/f  -  (  f 


Date  Issued 


Time  Issued 


\ 


UNITED  STAGES  MAGISTR  Al'E  JUDGE 
Southern  District  of  New  York' 
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ATTACHMENT  A 


This  warrant  authorizes  the  use  of  the  electronic  investigative  technique  described  in 
Attaclunent  B  to  identify  the  location  of  the  cellular  devices  assigned  phone  numbers 

wireless  provider  is  AT&T,  and  whose  listed  subscriber  is  Michael 


Cohen. 
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ATTACHMENT  B 

Pursuant  to  an  investigation  of  Michael  Cohen  for  a  violation  of  52  U.S.C.  §§ 
30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”), 
this  Warrant  authorizes  the  officers  to  whom  it  is  directed  to  determine  the  location  of  the  cellular 
devices  identified  in  Attachment  A  by  collecting  and  examining: 

1.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellulai’  device  for  the  puipose  of 
commnnicating  with  cellular  infrastructure,  including  towers  that  route  and  connect 
individual  communications;  and 

2.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellulai'  device  in  response  to  radio 
cellular  and  wifi  signals  sent  to  the  cellular  device  by  the  officers; 

for  a  period  of  thirty  days,  dm'ing  all  times  of  day  and  night.  This  warrant  does  not  authorize  the 
interception  of  any  telephone  calls,  text  messages,  other  electronic  communications,  and  this 
warrant  prohibits  the  seizure  of  any  tangible  property.  The  Court  finds  reasonable  necessity  for 
the  use  of  the  technique  authorized  above.  See  18  U.S.C.  §  3103a(b)(2). 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 

Case  No.  ■ _ 

Filed  Under  Seal 


AFFIDAVIT  IN  SUPPORT  OF 
AN  APPLICATION  FOR  A  SEARCH  WARRANT 


being  first  duly  sworn,  hereby  depose  and  state  as  follows: 
INTRODUCTION  AND  AGENT  BACKGROUND 

1 .  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  under 

Federal  Rule  of  Criminal  Procedure  41  to  authorize  law  enforcement  to  employ  an  electronic 
investigative  technique,  which  is  described  in  Attachment  B,  to  determine  the  location  of  the 
cellular  devices  assigned  call  numbers  “Target  Cellular 

Devices”),  which  are  described  in  Attachment  A. 

2.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I 
have  been  a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training 
in  these  positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a 
wide  array  of  financial  crimes,  including  offenses  involving  public  corruption.  I  also  have 
training  and  experience  executing  warrants  for  cellphone  location  data. 

3.  The  facts  in  this  affidavit  come  from  my  personal  observations,  my  training  and 
experience,  and  information  obtained  from  other  agents  and  witnesses.  This  affidavit  is  intended 
to  show  merely  that  there  is  sufficient  probable  cause  for  the  requested  warrant  and  does  not  set 
forth  all  of  my  knowledge  about  this  matter. 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE 
CELLULAR  DEVICES  ASSIGNED  CALL 
NUMBERS  AND 
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4.  One  purpose  of  applying  for  this  warrant  is  to  determine  with  precision  the  Target 
Cellular  Devices’  location.  However,  there  is  reason  to  believe  the  Target  Cellular  Devices  are 
currently  located  somewhere  within  this  district  because  the  Target  Cellular  Devices’  owner  is 
known  to  spend  most  of  his  time  in  this  district.  Pursuant  to  Rule  41(b)(2),  law  enforcement  may 
locate  the  Target  Cellular  Devices  outside  the  district  provided  the  device  is  within  the  district 

.  when  the  warrant  is  issued. 

5.  Based  on  the  facts  set  forth  in  this  affidavit,  there  is  probable  cause  to  believe  that 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”)  has  been  committed,  are  being  committed,  and  will  be  committed  by 
Michael  Cohen  and  others.  There  is  also  probable  cause  to  believe  that  the  location  of  the  Target 
Cellular  Devices  will  lead  to  evidence  of  the  Subject  Offense,  as  detailed  below. 

6.  Because  collecting  the  information  authorized  by  this  warrant  may  fall  within  the 
statutory  definitions  of  a  “pen  register”  or  a  “trap  and  trace  device,”  see  18  U.S.C.  §  3127(3)  & 
(4),  this  warrant  is  designed  to  comply  with  the  Pen  Register  Statute  as  well  as  Rule  41.  See  18 
U.S.C.  §§  3 121-3 127.  This  warrant  therefore  includes  all  the  information  required  to  be  included 
in  a  pen  register  order.  See  1 8  U.S.C.  §  3 123(b)(1). 

PROBABLE  CAUSE 

Introduction 

7.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York 

(“US AO”)  and  the  FBI  are  investigating  a  criminal  violation  of  the  campaign  finance  laws  by 

Michael  Cohen,  a  lawyer  who  holds  himself  out  as  the  personal  attorney  for  President  Donald  J. 

Trump.  As  detailed  below,  there  is  probable  cause  to  believe  that  Cohen  made  an  excessive  in- 

kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald  Trump  in  the 
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form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an 
extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair 
on  the  eve  of  the  2016  presidential  election. 

8.  The  Target  Cellular  Devices  referenced  in  this  Affidavit  are  the  cellphones 


assigned  call  numbersl 


IAs  further  discussed  below,  the  Target 


Cellular  Devices  are  subscribed  to  in  the  name  of  Michael  Cohen  (the  “Subscriber”).  The 
Suhscriherts^hellet^ho"Use~the  Thrget:Cellph:ones  and  is~aM"argetSuhtec^^^ 

AT&T  is  the  Service  Provider  for  the  Target  Cellphones. 

Prior  Relevant  Proeess 

9.  In  cormection  with  an  investigation  then  being  conducted  by  the  Office  of 
the  Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell, 
Chief  United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails 
and  other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 

a.  On  or  about  July  18, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 
in  the  account  j^J^m^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 
January  1,  2016.and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 

l^gmail.com  (the 


content  stored  in  the  iCloud  account  associated  with  Apple  ID 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  13, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,2015.  and  November  13,2017 
(the  “Second  Cohen  Gmail  Warrant”). 
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d.  On  or  about  November  13, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  “Cohen  MDCPC  Account”)  sent  or  received 

between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen 
to  the  USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  USAO  and  FBI  sought  and  obtained 
search  warrants  for  emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other 
accounts,  sent  or  received  between  November  14,  2017  and  February  28,  2018  (the  “Third  Cohen 
Gmail  Warrant”  and  “Second  Cohen  MDCPC  Warrant”).^ 

12.  The  above-described  warrants  are  referred  to  herein  as  the  “Cohen  Emails 
Warrants”  and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

1 3 .  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name, is  Stormy  Daniels,  in.  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 


^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

^  On  or  about  February  28,  2018  and  April  7, 2018,  the.USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11, 201 1,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
l-2^20Tlv-Gohen5“Who-^was-then-Exeeutive-¥iGe-President-and-SpeGial-GounseKto-the-Tramp — 
Organization,  stated  to  E!  News  that  “[t]he  totally  untme  and  ridiculous  story  . .  .  emanated  from 
a  sleazy  and  disgusting  website. , . .  The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 
a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  1 6,  20 1 5,  Trump  formally  launched  his  20 1 6  presidential 
campaign.  On  or  about  May  4,  20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  19,  2016,  Tmmp  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Gohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Gohen  made  public  statements  on  behalf  of 
Tmmp  or  his  campaign.  For  instance,  on  or  about  August  18,2016,  Gohen  appeared  on  CNN  to 
defend  Trump  ’  s  polling  numbers . 

15.  On  or  about  October  7, 2016,  The  Washington  Post  published  online  a  video 
and  accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as 
“vulgar  terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access 
Hollywood.  The  following  day,  on  October  8,  2016,  Tramp  appeared  in  a  video  in  which  he 
stated,  among  other  things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this 
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more  than  a  decade  old  video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t 
reflect  who  I  am.  I  said  it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public 
sources,  I  also  know  that  representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance, 
that  the  Access  Hollywood  comment  was  an  old  and  isolated  incident. 

16.  Based  on  my  review  of  public  sources,  including  an  article  published  in 
Slate  magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about 

-OGtober-2016,-CliffordvvasTn-discussions  -with_ABC7sjSQO(7  M3r«!/Bg.4iKiSticfl-ShowAnd_Safe_ 

magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her 
alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

17.  From  my  review  of  telephone  toll  records^  and  information  produced 
pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days 
following  the  Access  Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and 
emails  with  Keith  Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard 


^  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 
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of  American  Media,  Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,^  Trump,  and  Hope 
Hicks,  who  was  then  press  secretary  for  Trump’s  presidential  campaign.  For  these  text  messages 
and  calls — ^as  well  as  all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving 
Cohen — Cohen  used  one  of  the  Target  Cellular  Devices  for  the  communication. 

18.  Based  on  the  timing  of  the  calls  in  the  days  following  the  Access  Hollywood 
story,  and  the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these 
communications  eoncemed  the  need  to  prevent  Clifford  fr^om  going-public7particularly;inthe'wake 
of  the  Access  Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
on  the  telephone  about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October 


Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  uiitiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  another  law  enforcement  agent  who  has  spoken  to  a  law  enforcement  agent 
who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated,  in  substance,  to  the  best  of  her 
recollection,  she  did  not  learn  about  the  allegations  made  by  Clifford  until  early  November  2016. 
Hicks  was  not  specifically  asked  about  this  three-way  call. 
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8,  2016,  Cohen  and  Trump  had  spoken  onee  in  May,  onee  in  June,  onee  in  July,  zero  times  in 
August,  and  twiee  in  September. 

b.  Approximately  ten  minutes  after  the  eall  ended,  Hieks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  seeond  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  .Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes .  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  ■  At  3:3  i  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
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response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that 
said:  “Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you 
wake,  please  call  my  cell.” 

f.  The  following  day,  on  October  1 0, 20 1 6,  at  1 0 : 5  8  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
irpporttMtyTHhanks^Pylan.  OverHo  youytwof’ ""AtH'2:2:5~p:m;7T)avidson~sent~Cohen7aText 
message  that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to 
be  today.  Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on 
my  participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.® 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 


®  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  T  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen ' 
and  Pecker,  Howard,  and  Davidson. 


9 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  41  of  62 


pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  he  Clifford,  hut  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  side  letter  agreement  in 

order— to-faeilitatu-the-closing—of  a  deaLbetween-Davidsorfs_clienCandjCQhen  _or__his_client__on_ 

October  10,  2016. 

19.  It  appears  that  on  October  13, 2016,  and  the  days  that  followed,  Cohen  took 
steps  to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records, 
information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records 
maintained  by  First  Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews 
with  employees  of  First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,.!  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  fi:om  the  Secretary  of  State 
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of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 2016.  As.noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  -written  out  of  the  account.  Later  that  day, 
another"employee  aEFirst  RepublR”emailed-6ohen-account  opening-paperworkAo^complete.- 
Cohen  returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy 
of  his  driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he 
wanted  to  fund  the  account.  As  a  result,  the  account  was  never  opened. 

c .  On  October  1 7, 20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between 
Cohen  and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client, 
Clifford,  and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the 
presidential  election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  and  public  soui’ces,  I  know  the  following: 

■  a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’ s  email  account  hosted  by  the  Tmmp  Organization,  on  October  1 7, 20 1 6,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.'^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreemenf  ’  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: _ _ 

i  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “Fm  told 
they’  re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

il  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?”  ^ 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this,  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Orgamzation  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  docunients  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 

artiGle-noted-that-Clifford-had-declined-to-  comment - ^ - - - - — 

21.  On  or  about  October  25,  2016,  the  communications  between  Cohen, 
Davidson,  Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  mvolving 
Clifford.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
Cohen  Email  Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned 
the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awtully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next 
half  hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about 
eight  minutes.  At  7: 1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 : 04  a.m.— less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
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Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  EEC.”  That  person  responded  with  the  filing  receipt  two 
minutes  later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  him,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  First  Republic  Employee-2  that  he 
was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-1  ”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1 :00  a.m..  First  Republic 
Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee- 1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization— and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your-customer 

I 

questions  about  the  purpose  of  the  account— the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form— Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the  “Essential 
Consultants  Account’)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an 

attorney  client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  ftom  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at.  approximately  4:15  p.m.  on  October 
26,  2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

- - At-6737  p7m7rGohen-asked-Peeker-by7tejft-messagey-“Gan~we^spealc?-Important2^ 

Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  ftom  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  Ime  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receivmg  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  ai-ound  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — 
with  the  funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect 
to  the  allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my 
review  of  toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and 
Cohen  Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the-wire-receive(ktoday,-Qctober  27,.20T6^shalkbe_held  hyWQtLm„KQhl  ^horpgyisjtrust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account^ — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  'wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.rn.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  EEC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  1 0:50  a.m..  First  Republic  Employee- 1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the 
transaction  with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28,  2016,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

— - br  -Later-that-dayy-at-  appro^mately— 7^01-pimTH34vidson  stated-to-Goheii  by-text 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidentiaTinformation  pertaining  to  [Dennison]”  in  exchange  for 
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$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s” 
attorney,  who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of 
“EC,  LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in 
the  agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  toansferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy.mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but 
it  appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to 
Kellyanne  Conway,  who  at  the  time  was  Trump’ s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was 
completed  and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an 
article  alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by, 
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Playboy  model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI 
had  agreed  to  pay  McDougal  to  bury  her  story.  McDougal,  lUce  Clifford,  had  been  represented 
by  Davidson.  Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen . 
Email  Warrants  and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently 
to  Davidson,  Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days 
before  Election  Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from 


gaining-national  fraction. — Specifically^  f  have  leamed-tfreTollowing^ 


a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent 
Howard  a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump 
Organization  lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for 

comment  from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several 

\ 

times,  including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 

really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 

minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 

responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 

At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 

want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 

investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’ s  pissed.”  Howard  wrote  back, 
“I’m  piss^^i  Ymi’rp  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based 
on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated 
“he’s  pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal 
could  publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment 
from  AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howai'd,  “Is  there  a  way  to  fmd 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text-  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  •  Hicks  responded,  “Same.  Keep  praying! !  It’s 
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working!”  Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if 
necessary,  I  have  a  statement  by  Storm  denying  everything  and  contradicting  the  other  porn  stars 
statement.  I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!” 
Based  on  my  involvement  in  this  investigation,  E  believe  Cohen  was  referring  to  the  above- 
referenced  recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating 
that  such  a  statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but 
was-unneeess^y  aCthat'time; — Based-on-a-text-message“from7Hic]^-to-Gohen,-Ebelieyedhaf  later 
that  morning.  Pecker  spoke  to  Tramp. 

25.  On  or  about  November  8,  2016,  Trump  won  the  election  for  President  of  . 
the  United  States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that 
Cohen  arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a 
government  watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging 
that  Cohen  had  violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my 
review  public  sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants,  I  have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an’ 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
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keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  7 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  1  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  1  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’ s  what  you  do  for  family. 

(Emphasis-added.)-3asedmnmy_involvementin  thismvgstigation,  I  belieye_that  theahove  ernalL 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (j\..the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  haO  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  tirhe  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “1  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 
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) 

d.  On  or  about  March  9,  20 1 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
firom  my.home  equity  line  and  transferred  internally  to  my  LLC  accoimt  in  the  same  bank.” 

27.  For  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  Cohen 
committed  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump  or  the  Trump 
campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  election.  Indeed,  while  Cohen 
denies  having  given  an  unlawful  contribution,  in  his  own  statements  Cohen  has  admitted  that  he 
paid-$T3 0,000-oThis-^personal-funds”  to- Clifford: and7that-the-payment-qccurred- less  than  two- 
weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about  his  behavior 
toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  existed  since 
2011. 

28.  I  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned, 
in  substance  and  in  part,  that  the  Target  Cellular  Devices  are  still  active.  Based  on  my  training 
and  experience,  my  familiarity  with  this  investigation,  and  the  information  set  forth  above,  I 
therefore  believe  that  the  requested  data  will  lead  to  evidence  of  the  Subject  Offense. 
Specifically,  information  will  lead  to  the  present  location  of  the  Target  Cellular  Devices;  law 
enforcement  may  then  obtain  evidence  from  the  Target  Cellular  Devices,  by  subpoena  or  search 
waiTant,  including  but  not  limited  to  contact  lists  containing  contact  information  for  participants 
in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages  between  these  participants. 

MANNER  OF  EXECUTION 

29.  .  In  my  training  and  experience,  I  have  learned  that  cellular  phones  and  other 

cellular  devices  communicate  wirelessly  across  a  network  of  cellular  infrastructure,  including 

towers  that  route  and  connect  individual  communications.  When  sending  or  receiving  a 

communication,  a  cellular  device  broadcasts  certain  cellular  and  wifi  signals  to  the  cellular  tower 
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that  is  routing  its  communication.  These  eellular  and  wifi  signals  inelude  a  eellular  deviee’s 
unique  identifiers. 

30.  To  faeilitate  exeeution  of  this  warrant  to  determine  the  loeation  of  the  Target 
Cellular  Deviees,  law  enforeement  may  use  an  investigative  deviee  or  deviees  eapable  of 
broadeasting  eellular  and  wifi  signals  that  will  be  reeeived  by  the  Target  Cellular  Deviees  or 
reeeiving  cellular  and  wifi  signals  from  nearby  eellular  deviees,  including  the  Target  Cellular 
Devices.  Such  a  deviee  may  function  in  some  respeets  like  a  cellular  tower,  except  tha.t  it  will  not 
be  connected  to  the  cellular  network  and  cannot  be  used  by  a  cell  phone  to  communicate  with 
others.  The  device  may  send  a  signal  to  the  Target  Cellular  Devices  and  nearby  cellular  devices 
and  thereby  prompt  them  to  send  cellular  and  wifi  signals  that  include  the  unique  identifier  of  the 
device.  Law  enforcement  may  monitor  the  cellular  and  wifi  signals  broadcast  by  the  Target 
Cellular  Devices  for  non-content  signal  information  and  use  that  information  to  determine  the 
Target  Cellular  Devices’  location,  even  if  it  is  located  inside  a  house,  apartment,  or  other  building. 
The  device  will  not  intercept,  the  contents  of  the  Target  Cellular  Devices’  communications,  such 
as  telephone  calls,  text  messages,  and  other  electronic  communications.  Further,  the  device  will 
not  collect  any  other  data  stored  on  the  Target  Cellular  Devices,  including  e-mails,  text  messages, 
contact  lists,  images,  or  Global  Positioning  System  (GPS)  data. 

31.  The  investigative  device  may  interrupt  cellular  service  of  phones  or  other 

cellular  devices  within  its  immediate  vicinity.  Any  service  disruption  to  non-target  devices  will 

be  brief  and  temporary,  and  all  operations  will  attempt  to  limit  the  interference  with  such  devices. 

In  order  to  connect  with  the  Target  Cellular  Devices,  the  device  may  briefly  exchange  cellular  and 

wifi  signals  with  all  phones  or  other  cellular  devices  in  its  vicinity  to  determine  whether  those 

devices’  unique  identifiers  match  the  identifiers  of  the  Target  Cellular  Devices.  These  cellular 
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and  wifi  signals  may  include  cell  phone  identifiers.  The  device  will  not  complete  a  connection 
with  cellular  devices  determined  not  to  be  the  Target  Cellular  Devices,  and  law  enforcement  will 
limit  collection  of  information  from  devices  other  than  the  Target  Cellular  Devices.  To  the  extent 
that  any  information  from  a  cellular  device  other  than  the  Target  Cellular  Devices  is  collected  by 
the  law  enforcement  device,  law  enforcement  will  delete  that  information,  and  law  enforcement 
will  make  no  investigative  use  of  it  absent  farther  order  of  the  court,  other  than  distinguishing  the 

-Target-Cellular “Deyiees-fiom-alTother-eellular-deviees^ - -  -  - - 

AUTHORIZATION  REQUEST 

32.  Based  on  the  foregoing,  I  request  that  the  Court  issue  the  proposed  search 
warrant,  pursuant  to  Federal  Rule  of  Criminal  Procedure  41.  The  proposed  warrant  also  will 
fimction  as  a  pen  register  order  under  18  U.S.C.  §  3123. 

33.  I  farther  request,  pursuant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of 
Criminal  Procedure  41(f)(3),  that  the  Court  authorize  the  officer  executing  the  warrant  to  delay 
notice  until  30  days  fiom  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified 
because  there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant 
may  have  an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the 
subscriber  or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing 
investigation,  as  such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence, 
change  patterns  of  behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is 
reasonable  necessity  for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above. 

18  U.S.C.  §3103a(b)(2). 
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34.  I  further  request  that  the  Court  authorize  execution  of  the  warrant  at  any 
time  of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of 
daytime  hours. 

35.  I  further  request  that  the  Court  order  that  all  papers  in  support  of  this 
application,  including  the  affidavit  and  search  warrant,  be  sealed  until  further  order  of  the  Court. 


These  documents  discuss  an  ongoing  criminal  investigation  that  is  neither  public  nor  known  to  all 
of  the  targets  of  the  investigation.  Accordingly,  there  is  good  cause  to  seal  these  documents 
because  their  premature  disclosure  may  seriously  jeopardize  that  investigation. 

36.  A  search  warrant  may  not  be  legally  necessary  to  compel  the  investigative 
technique  described  herein.  Nevertheless,  I  hereby  submit  this  warrant  application  out  of  an 
abundance  of  caution. 


Respectfully  submitted. 


f  ederal  Bureau  ot  Investigation 


Subscribed  and  sworn  to  before  me 
On:  /WtM  L  "Zy  ‘2 Ji  1  ^  ' 


UNITED  STATES  MAGISTRATE  JUDGE 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE 
CELLULAR  DEVICES  ASSIGNED  CALL 
NUMBERS 


Case  No. 


Filed  Under  Seal 


WARRANT  AND  ORDER  OF  AUTHORIZATION 
TO;  Special  Agents  of  the  Federal  Bureau  of  Investigation  and  Other  Authorized 


PersoTmel^^^ 

I.  Findings 

The  Court  hereby  finds: 

1.  Upon  an  affidavit  of  Special  Agent  the  Federal  Bureau  of 

Investigation  (“Affidavit”)  and  pursuant  to  Federal  Rule  of  Criminal  Procedure  41,  there  is 
probable  cause  to  believe  that  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”)  have  been  committed  by  Michael  Cohen 
(the  “Target  Subjecf’),  and  that  the  Target  Subject  uses  cellular  devices  assigned  call  numbers 

Ithe  (“Target  Cellular  Devices”),  which  are  described  in 
Attachment  A.  Further,  there  is  probable  cause  to  believe  that  the  location  of  the  Target  Cellular 
Device  Mil  constitute  evidence  of  the  Subject  Offense.  Specifically,  there  is  probable  cause  to 
believe  that  the  location  of  the  Target  Cellular  Devices  will  constitute  evidence  of  those  criminal 
violations,  including  leading  to  the  location  of  the  Target  Cellular  Devices,  on  which  there  is 
probable  cause  to  believe  evidence  of  these  offenses  exist,  as  detailed  below. 

2.  Pursuant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  certified  that  the  pen 
register  information  for  the  Tai'get  Cellular  Devices  is  relevant  to  an  ongoing  investigation  by  the 
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Investigating  Agency  of  the  Target  Subject  and  others  unknown  in  connection  with  suspected 
violations  of  the  Subject  Offense. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Crim.  P.  41,  18  U.S.C.  §§  3121  et  seq.,  and  18 
U.S.C.  §'  3103a,  IT  IS  HEREBY  ORDERED: 
n.  Warrant  and  Order  of  Authorization 

3.  Warrant.  Law  enforcement  agents  and  other  authorized  law  enforcement 
offiGialsare-hereby-authorizedTo-employ-an-electronic,investigativeJechnique,whichis^de^ribei 
in  Attachment  B,  to  the  determine  the  location  of  the  Target  Cellular  Devices,  which  are  described 
in  Attachment  A. 

4.  Data  Collection  and  Retention.  In  the  course  of  employing  the  technique,  law 
enforcement  agents  and  other  authorized  law  enforcement  officials  (a)  must  make  reasonable 
efforts  to  limit  interference  with  cellular  devices  other  than  the  Target  Cellular  Devices,  (b)  must 
promptly  delete  information  collected  from  cellular  devices  other  than  the  Target  Cellular  Devices 
once  the  Target  Cellular  Devices  is  located,  and  (c)  are  prohibited  from  using  data  acquired  beyond 
that  necessary  to  locate  the  Target  Cellular  Devices,  absent  further  order  of  the  Court. 

5.  Delayed  Notice.  Pursuant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of  Criminal 
Procedure  41(1)(3),  the  Court  authorizes  the  officer  executing  the  warrant  to  delay  in  notice  until 
30  days  from-the-end-oDthe-period-oDauthorized-surveillance.  This  delayTs-justifiecLbecause 
there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant  may  have 
an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the  subscriber 
or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing  investigation,  as 
such  a  disclosure  would  give  that  person  an  oppoitunity  to  destroy  evidence,  change  patterns  of 
behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is  reasonable  necessity 
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for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above.  See  18  U.S.C.  § 
3103a(b)(2). 

6.  Time  of  Execution.  The  Court  authorizes  execution  of  this  Warrant  at  any  time 
of  day  or  night,  o^ving  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of  daytime 
hours. 

7.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Agent  Affidavit,  shall  be 
-sealed-until  further-  order-  oTthe-Comd,-  exeept-that-the-Go vemment-may-vrithout-further-  order-of 
this  Court:  provide  copies  of  the  Warrant  and.  Order  or  the  supporting  Application  and  Agent 
Affidavit  as  need  he  to  persormel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 

Date  Issued^  Time  Issued 

_ S/ 

UNITED  STATES  MAGISTRATE  JUDGE 
Southern  District  of  New  York 
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ATTACHMENT  A 


This  warrant  authorizes  the  use  of  the  electronic  investigative  technique  described  in 
Attachment  B  to  identify  the  location  of  the  cellular  devices  assigned  phone  numbers 
^^^^^^^^^^Hwhose  wireless  provider  is  AT&T,  and  whose  Usted  subscriber  is  Michael 


Cohen. 
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ATTACHMENT  B 

Pursuant  to  an  investigation  of  Michael  Cohen  for  a  violation  of  52  U.S.C.  §§ 
30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”), 
this  Warrant  authorizes  the  officers  to  whom  it  is  directed  to  determine  the  location  of  the  cellular 
devices  identified  in  Attachment  A  by  collecting  and  examining: 

1.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  for  the  purpose  of 
yxommunicating^mthmcelluiar  dnfiastructiireTTinciuding  towers^that yroute  mnd  xom^ 

individual  communications;  and 

2.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  in  response  to  radio 
cellular  and  wifi  signals  sent  to  the  cellular  device  by  the  officers; 

for  a  period  of  thirty  days,  during  all  times  of  day  and  night.  This  warrant  does  not  authorize  the 
interception  of  any  telephone  calls,  text  messages,  other  electronic  communications,  and  this 
warrant  prohibits  the  seizure  of  any  tangible  property.  The  Court  finds  reasonable  necessity  for 
the  use  of  the  technique  authorized  above.  See  18  U.S.C.  §  3103a(b)(2). 
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U.S.  Department  of  Justice 


United  States  Attorney 
Southern  District  of  New  York 


The  Silvio  J.  Mollo  Building 
One  Saint  Andrew ’s  Plaza 
New  York,  New  York  10007 


July  15,  2019 


EX  PARTE  and  UNDER  SEAL 

BY  EMAIL  and  HAND 

The  Honorable  William  H.  Pauley  III 
United  States  District  Judge 
Southern  District  of  New  York 
500  Pearl  Street 
New  York,  NY  10007 

Re:  United  States  v.  Michael  Cohen,  18  Cr.  602  (WHP) 

Dear  Judge  Pauley: 

Pursuant  to  the  Court’s  February  7,  2019  opinion  and  order  (the  “Order”)  and  May  21, 
2019  order,  the  Government  respectfully  submits  this  sealed,  ex  parte  status  report  explaining  the 
need  for  continued  redaction  of  the  materials  subject  to  the  Order.  {See  Order  at  30). 

By  way  of  background,  several  media  organizations  filed  a  request  to  unseal  the  affidavits, 
warrants,  and  riders  associated  with  several  different  searches  that  were  conducted  in  connection 
with  a  grand  jury  investigation  into  Michael  Cohen  and  others  (the  “Materials”).  The  Government 
opposed  that  request,  citing  the  need  to  protect  an  ongoing  investigation  and  the  personal  privacy 
of  certain  individuals  named  in  the  Materials.  On  February  7,  2019,  this  Court  granted  the  motion 
in  part  and  denied  it  in  part.  Although  the  Court  directed  that  certain  parts  of  the  Materials  be 
unsealed  (with  limited  redactions  to  protect  privacy  interests),  the  Court  denied  the  motion  to 
unseal  all  of  the  Materials.  Relevant  here,  the  Court  held  that  “the  portions  of  the  Materials  relating 
to  Cohen’s  campaign  finance  crimes  shall  be  redacted”  to  protect  the  ongoing  law  enforcement 
investigation.  (Order  at  11).  On  May  21,  2019,  after  receiving  a  status  update  from  the 
Government  on  the  need  for  continued  sealing,  the  Court  issued  an  order  permitting  continued 
sealing  of  the  campaign  finance  portions  of  the  Materials  to  protect  an  ongoing  investigation,  and 
directed  that  the  Government  provide  another  update  by  this  date. 

The  Government  is  no  longer  seeking  to  maintain  the  campaign  finance  portions  of  the 
Materials  under  seal  in  order  to  protect  an  ongoing  investigation.  ^  However,  while  the  majority  of 


*  The  Government  has  effectively  concluded  its  investigations  of  (1)  who,  besides  Michael  Cohen, 
was  involved  in  and  may  be  criminally  liable  for  the  two  campaign  finance  violations  to  which 
^  and  (2)  whether  certain  individuals. 


connection  with  this  investigation 


I,  made  false  sta  se  testimony  or  otherwise  obstructed  justice  in 
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the  campaign  finance  portions  of  the  Materials  can  now  be  unsealed,  the  Government  respectfully 
submits  that  some  redactions  should  be  maintained  in  order  to  protect  the  personal  privacy  of 
certain  individuals.  In  particular,  consistent  with  the  Court’s  prior  Order,  the  Government  seeks 
to  redact  references  to  individuals  who  are  either  (1)  ‘“peripheral  characters’  for  whom  the 
Materials  raise  little  discernable  inference  of  criminal  conduct”  but  who  “may  nonetheless  be 
‘stigmatized’”  by  their  inclusion  in  the  Materials;  or  (2)  people  “around  Cohen  from  which  the 
public  might  infer  criminal  complicity.”  (Order  at  14).  However,  while  most  references  to  such 
individuals  are  redacted,  the  Government  does  not  seek  to  redact  references  to  those  individuals 
that  are  either  (a)  facts  that  have  been  publicly  confirmed,  either  by  the  individual  in  public 
statements  or  the  Government  in  public  filings;  or  (b)  facts  sourced  from  publicly  available 
materials.  {See  Order  at  1 5  (“Shielding  third  parties  from  unwanted  attention  arising  from  an  issue 
that  is  already  public  knowledge  is  not  a  sufficiently  compelling  reason  to  justify  withholding 
judicial  documents  from  public  scrutiny.”)). 

Together  with  this  letter,  the  Government  has  transmitted  a  copy  of  one  of  the  search 
warrant  affidavits  with  the  proposed  redactions  marked.  See  Ex.  A,  at  38-57,  66-67,  71,  73-74, 
83-101.  (The  proposed  redactions  also  include  the  privacy-based  redactions  previously  authorized 
in  the  bank  and  tax  portions  of  the  Materials.)  The  Government  respectfully  requests  that  the  Court 
approve  these  redactions,  and  will  submit  corresponding  redactions  to  the  other  affidavits  (which 
are  substantially  similar  to  the  attached  affidavit)  once  the  Court  has  ruled  on  these  proposed 
redactions. 


Respectfully  submitted. 


AUDREY  STRAUSS 


Attorney  for  the  United  States, 

Acting  Under  Authority  Conferred  by 
28  U.S.C.  §  515 


Thomas  McSSyT^icolas  Roos 
Assistant  United  States  Attorneys 
(212)  637-2200 


cc:  Counsel  of  Record  (by  ECE) 


